{"type":"bundle","id":"bundle--247f4899-2e22-0df4-4890-0000703c55a5","objects":[{"type":"marking-definition","spec_version":"2.1","id":"marking-definition--550e8400-e29b-41d4-a716-446655440000","created":"2026-08-23T10:30:14-04:00","definition_type":"tlp","name":"TLP:AMBER","definition":{"tlp":"amber"}},{"type":"indicator","spec_version":"2.1","id":"indicator--201dad11-5379-d04f-2ee3-0000913d22b4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://p3.zbjimg.com/task/2009-06/29/106045/5fg9yjwr.rar","pattern":"[url:value = 'http://p3.zbjimg.com/task/2009-06/29/106045/5fg9yjwr.rar']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ad5802b-85a5-336e-9e76-00000d545225","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://sochibeer.ru/core/cache/action_map/web/sserv.jpg","pattern":"[url:value = 'http://sochibeer.ru/core/cache/action_map/web/sserv.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa6007b6-d726-5eb0-1ca5-000037563039","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://sochibeer.ru/core/cache/action_map/web/ssj.jpg","pattern":"[url:value = 'http://sochibeer.ru/core/cache/action_map/web/ssj.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6eb3ba0-65da-af90-2d77-00002664ccd0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://images2.imgbox.com/ff/22/6NkpoT2I_o.png","pattern":"[url:value = 'https://images2.imgbox.com/ff/22/6NkpoT2I_o.png']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55fe8fd6-1123-d276-4618-00009b6c57e6","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://images2.imgbox.com/86/e2/nuFlPuWf_o.png","pattern":"[url:value = 'https://images2.imgbox.com/86/e2/nuFlPuWf_o.png']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdab68b9-3072-667d-9097-0000d2d91b33","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://images2.imgbox.com/ce/60/RW99SPa3_o.png","pattern":"[url:value = 'https://images2.imgbox.com/ce/60/RW99SPa3_o.png']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0faa9ef7-d855-bd97-d08b-00009d3ccd96","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://images2.imgbox.com/9e/ff/iLa2JH9p_o.png","pattern":"[url:value = 'https://images2.imgbox.com/9e/ff/iLa2JH9p_o.png']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2639638-f592-ff6c-dfc7-00002daeec1a","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://images2.imgbox.com/cd/81/DDQ7kPrp_o.png","pattern":"[url:value = 'https://images2.imgbox.com/cd/81/DDQ7kPrp_o.png']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fefca66-5edb-f7a2-04dd-0000b98c321e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.12.78.161:36220/.i","pattern":"[url:value = 'http://185.12.78.161:36220/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4fbf8b2-c9e8-178b-a9fb-0000c4a62f45","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://36.66.139.36:53736/.i","pattern":"[url:value = 'http://36.66.139.36:53736/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5433dc85-4a44-34d7-8bae-000081d57794","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://cdn.xiaoduoai.com/cvd/dist/fileUpload/1571723382710/9.915787746614242.jpg","pattern":"[url:value = 'http://cdn.xiaoduoai.com/cvd/dist/fileUpload/1571723382710/9.915787746614242.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c135933e-8ed4-f4f1-c0e2-0000d65c900f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://oknoplastik.sk/index_soubory/common_sector/external_area/61551354147_t4d0KY73JJyWFfGY/","pattern":"[url:value = 'http://oknoplastik.sk/index_soubory/common_sector/external_area/61551354147_t4d0KY73JJyWFfGY/']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b219180b-c2e7-599b-be03-00001e539a64","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://mysura.it/njtzac0.tar","pattern":"[url:value = 'https://mysura.it/njtzac0.tar']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--886d6c15-9114-6185-77c3-000014d01df3","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://94.231.164.10:6432/.i","pattern":"[url:value = 'http://94.231.164.10:6432/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--792cda41-8ba6-cb52-f266-0000cc21e356","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://191.33.171.242:55443/.i","pattern":"[url:value = 'http://191.33.171.242:55443/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da8c1675-bf54-d9db-df83-00005eda9513","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://deagroup-ks.com/converting.php","pattern":"[url:value = 'https://deagroup-ks.com/converting.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5093700e-6cc5-7795-7b61-0000b8d1d3fc","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://deagroup-ks.com/approx.php","pattern":"[url:value = 'https://deagroup-ks.com/approx.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6182314e-8a59-1bfc-aa87-00004b9900bb","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://94.43.139.153:47962/Mozi.m","pattern":"[url:value = 'http://94.43.139.153:47962/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68347d65-5dcc-b969-e244-0000014fbf03","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://94.43.139.153:47962/Mozi.a","pattern":"[url:value = 'http://94.43.139.153:47962/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcfbf6cd-19a4-ba1b-32d3-000005882dce","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/whiz.php","pattern":"[url:value = 'https://kramersmarionnettes.com/whiz.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfae7477-6d55-3509-38f0-0000dff509d9","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/unexplainable.php","pattern":"[url:value = 'https://kramersmarionnettes.com/unexplainable.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d22f7366-079d-022e-4d3a-000017efe582","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/unthinkably.php","pattern":"[url:value = 'https://kramersmarionnettes.com/unthinkably.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e6575e8-557c-02e3-af28-00003c17dcec","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/conditioner.php","pattern":"[url:value = 'https://kramersmarionnettes.com/conditioner.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02f13a0f-f9e7-6bd8-14f9-000010391e62","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/frustrating.php","pattern":"[url:value = 'https://kramersmarionnettes.com/frustrating.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57840397-7882-66eb-f63b-0000cdd2ff76","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/designer.php","pattern":"[url:value = 'https://kramersmarionnettes.com/designer.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fdfbcf9-058d-a308-6607-0000107f234f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/fizz.php","pattern":"[url:value = 'https://kramersmarionnettes.com/fizz.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26190b8e-3cec-1fb3-652c-000098420209","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/antienuretic.php","pattern":"[url:value = 'https://kramersmarionnettes.com/antienuretic.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4269f8d9-05da-f195-cfb5-00009e25f91a","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/redesign.php","pattern":"[url:value = 'https://kramersmarionnettes.com/redesign.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--962fd863-18a8-99c0-902b-00005cd7420f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/intermission.php","pattern":"[url:value = 'https://kramersmarionnettes.com/intermission.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b0872cd-3ebc-3f05-d642-00007ed3d370","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/roughness.php","pattern":"[url:value = 'https://kramersmarionnettes.com/roughness.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a93dc87-f7e6-7884-2b48-00005487000c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/actionably.php","pattern":"[url:value = 'https://kramersmarionnettes.com/actionably.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdb8cf42-3508-e471-d7a5-00000eb0ec82","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://tpp.om-stock.com/app/webroot/assets/global/plugins/jquery-file-upload/server/php/files/dwarves.php","pattern":"[url:value = 'https://tpp.om-stock.com/app/webroot/assets/global/plugins/jquery-file-upload/server/php/files/dwarves.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91d7ec4c-e851-1d28-5aca-0000678aca0c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.219.38.228:23053/.i","pattern":"[url:value = 'http://178.219.38.228:23053/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afee4b9f-1337-8278-bfcd-00005606e37d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://twu-hwt.org/scarica/","pattern":"[url:value = 'https://twu-hwt.org/scarica/']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d40a875d-52bf-b243-7ffc-000004051f0b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://jawaratekno.com/rid/rid.js","pattern":"[url:value = 'https://jawaratekno.com/rid/rid.js']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eaa0918-d2e4-77de-2150-000001824687","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.49.47.190:46516/.i","pattern":"[url:value = 'http://181.49.47.190:46516/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbda7665-cf86-657d-a114-0000a509a964","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.129.177.162:26290/.i","pattern":"[url:value = 'http://181.129.177.162:26290/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d43f7b1e-1478-4e33-afbc-000098634600","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://friendsofsclarc.org/pEp/per.zip","pattern":"[url:value = 'http://friendsofsclarc.org/pEp/per.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33fbdc6d-21bd-9bf9-48f0-0000b39bbc69","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.spc","pattern":"[url:value = 'https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c0f53fa-b07d-670e-a6aa-00004d0ca0b2","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.x86","pattern":"[url:value = 'https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eae0d0f3-0e24-0a52-0111-000062c6afaa","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.mips","pattern":"[url:value = 'https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c745e3b-0a48-1780-9da2-0000af188a1c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.i686","pattern":"[url:value = 'https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb8ce3e4-2ab8-83ff-5121-0000cbc0520d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1uDPaHhKAbFDJZ32B558XH_LWXs0SnoWc","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1uDPaHhKAbFDJZ32B558XH_LWXs0SnoWc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2755c99-13a6-fa1c-204b-000030d55188","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1Ugl_xjshxERWWBAl1fAtfLznEkOrQco5","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1Ugl_xjshxERWWBAl1fAtfLznEkOrQco5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8754e22f-e708-cc8a-3113-0000c7294077","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1tnXrXchvMoxFTeW7Sl3FR0m9yw4O3x2X","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1tnXrXchvMoxFTeW7Sl3FR0m9yw4O3x2X']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84cfbbdc-5100-4bb4-eb2d-00007c0f212c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1P5MYROMJpRoU5-vehST_hPzb7PBwAgjW","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1P5MYROMJpRoU5-vehST_hPzb7PBwAgjW']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2ac0437-ee9f-7327-34a7-00006e5e9cce","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=19-Hbu_SfsIwGjFm4yP1k22atK3NMwAO8","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=19-Hbu_SfsIwGjFm4yP1k22atK3NMwAO8']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8870cb3-6727-ab68-3866-0000ec075cd0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1x6cD0z6l79CIeFoo627uIWS_6yScm_Xn","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1x6cD0z6l79CIeFoo627uIWS_6yScm_Xn']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9b48270-96a6-71ea-93e3-0000653ea04b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1T36pjQS33B0Q_K78zBmXJrlbRzkssrbu","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1T36pjQS33B0Q_K78zBmXJrlbRzkssrbu']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccf94755-ce50-2876-4670-0000e5583a43","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1UzJ6RBKjYYFcVPddYaDuaBxFAY7w4_9W","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1UzJ6RBKjYYFcVPddYaDuaBxFAY7w4_9W']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71be226e-3ba3-a05b-f9fa-00003d547b5e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1smJsnS4dJErxM11i8rX6LDttpSyNiDio","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1smJsnS4dJErxM11i8rX6LDttpSyNiDio']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6e645b4-16b5-b219-d308-0000f246ef89","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1l-zoyASmFCWfA655dUD7EKUdjQ3ywQUk","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1l-zoyASmFCWfA655dUD7EKUdjQ3ywQUk']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eff1d279-be01-e7a0-ac70-0000d6e27389","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=171-Yky-J89KRiGHoJrMMetM69VBmd5M4","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=171-Yky-J89KRiGHoJrMMetM69VBmd5M4']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38e65d34-4663-8089-8ebd-000091686c8e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://75.119.134.80/i386","pattern":"[url:value = 'http://75.119.134.80/i386']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ea3f824-2f1d-eac7-1b6f-00005888324b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://75.119.134.80/armv7l","pattern":"[url:value = 'http://75.119.134.80/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7da1712-13f3-7600-44f0-000088518d1b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1OSqXHD1NCdYo-hhAvraDWBM9_Itb2P49","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1OSqXHD1NCdYo-hhAvraDWBM9_Itb2P49']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1566150-a517-cdfb-a70c-00006624c598","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1Oe1iXppk9TdxFMaIrSjHsacDGh2lItAG","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1Oe1iXppk9TdxFMaIrSjHsacDGh2lItAG']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e244df38-5560-4259-2bc1-0000a91fad3d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1B3Zgfh-Ofoq4NkIFk7J0MAnBU5aqVHeT","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1B3Zgfh-Ofoq4NkIFk7J0MAnBU5aqVHeT']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f1c1421-4455-2699-3c60-0000f756e26c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1CWTWOuj-_kjecYZnl4NQjPGfD44j3b-b","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1CWTWOuj-_kjecYZnl4NQjPGfD44j3b-b']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a50435d-e859-0cfa-7be2-0000202db525","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1i33aFFjFKKZTyuZ_nusRZ4jQs45GwZjS","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1i33aFFjFKKZTyuZ_nusRZ4jQs45GwZjS']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a38cb9ba-caf5-8f6f-188a-0000edb6e431","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1PSJfkAVxoi-3yv-87EskdpUWZjD5JOMd","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1PSJfkAVxoi-3yv-87EskdpUWZjD5JOMd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6529fef-49db-daa7-66ad-0000257474e8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://2.57.122.121/ping","pattern":"[url:value = 'http://2.57.122.121/ping']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea798067-5db9-c1de-9238-0000abb4c932","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.123.55:41567/Mozi.a","pattern":"[url:value = 'http://81.16.123.55:41567/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4081af0-f6cc-7c0b-7dd0-0000ff444473","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.123.55:41567/Aqua.arm5","pattern":"[url:value = 'http://81.16.123.55:41567/Aqua.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d014b4a-80ca-7796-af9d-0000edf1eb9d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.123.55:41567/Aqua.arm6","pattern":"[url:value = 'http://81.16.123.55:41567/Aqua.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--930f2a66-b4c4-0168-3016-000047f82316","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.123.55:41567/Aqua.arm4","pattern":"[url:value = 'http://81.16.123.55:41567/Aqua.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b487ef0a-8727-7af7-e1a4-000053db396c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.123.55:41567/Aqua.sh4","pattern":"[url:value = 'http://81.16.123.55:41567/Aqua.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec673c93-d7d3-5f24-a7e6-0000ab06ceef","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.123.55:41567/Aqua.x86","pattern":"[url:value = 'http://81.16.123.55:41567/Aqua.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66071de2-6f82-e1fa-5886-00003f18b8b9","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://98.103.171.36:19021/i","pattern":"[url:value = 'http://98.103.171.36:19021/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14280d6b-fe8e-fcab-01ae-000030efb7cc","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.90.207.234:55903/i","pattern":"[url:value = 'http://103.90.207.234:55903/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--163b4358-4a28-a89c-0a29-0000fc86cf52","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.92.82.180:17789/i","pattern":"[url:value = 'http://91.92.82.180:17789/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1d368b2-b51d-0923-ee34-000080520dd0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://213.6.74.138:39286/i","pattern":"[url:value = 'http://213.6.74.138:39286/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1f8b23f-fa1d-cdb1-a8b8-0000bed451e6","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://93.123.169.160:27058/i","pattern":"[url:value = 'http://93.123.169.160:27058/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--726f021e-61bd-6c07-1bcd-00000df5d5ed","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.113.124.155:64726/i","pattern":"[url:value = 'http://190.113.124.155:64726/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1adce486-d911-ba23-31a3-0000a4b98a91","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://186.154.93.81:8125/i","pattern":"[url:value = 'http://186.154.93.81:8125/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5330578c-b1aa-5d44-6d3d-0000cf7a5c26","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.245.10.51:56156/i","pattern":"[url:value = 'http://103.245.10.51:56156/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a843ceb-3e68-6a0e-eb62-0000c8e74463","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://213.6.101.83:1609/i","pattern":"[url:value = 'http://213.6.101.83:1609/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f49129a4-3313-3549-6b0c-0000e9498cdf","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://154.84.212.18:20781/i","pattern":"[url:value = 'http://154.84.212.18:20781/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--790ba65e-e5b7-600d-5cd5-0000fddb848a","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.227.118.45:56789/i","pattern":"[url:value = 'http://103.227.118.45:56789/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17942180-574e-d85f-d672-00006ebe1c87","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://36.66.139.36:53736/i","pattern":"[url:value = 'http://36.66.139.36:53736/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69d2ef8c-305b-4076-213f-0000ad62fbf8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://37.57.33.51:49049/i","pattern":"[url:value = 'http://37.57.33.51:49049/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dea6df56-5672-8568-5c8e-0000a552c87f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://94.251.5.51:31559/i","pattern":"[url:value = 'http://94.251.5.51:31559/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c28abe6f-a418-b280-ff5c-0000c0d62079","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://36.88.180.115:20043/i","pattern":"[url:value = 'http://36.88.180.115:20043/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9322b204-3711-1194-f4e0-0000f0ec603f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.49.47.190:46516/i","pattern":"[url:value = 'http://181.49.47.190:46516/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46457c30-282b-caa1-7fe6-00005521239d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.71.69.198:34190/i","pattern":"[url:value = 'http://185.71.69.198:34190/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff91e3d1-48b0-5632-806d-00008a6619ab","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.108.84.121:28531/i","pattern":"[url:value = 'http://109.108.84.121:28531/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5776503c-dca9-f80d-7005-0000dadad050","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://41.77.74.90:10702/i","pattern":"[url:value = 'http://41.77.74.90:10702/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90e26fe9-e178-92f2-fc68-0000fe245a2d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.187.151.107:1500/i","pattern":"[url:value = 'http://103.187.151.107:1500/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45262dd7-b3cb-b149-af7b-00008e97b94c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://46.151.56.42:28186/i","pattern":"[url:value = 'http://46.151.56.42:28186/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bc57a8c-778c-e06f-4cfa-000022870062","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.216.100.166:30359/i","pattern":"[url:value = 'http://89.216.100.166:30359/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82e457a4-c8de-e87a-75a3-0000789a5d62","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://94.231.164.10:6432/i","pattern":"[url:value = 'http://94.231.164.10:6432/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1931fd70-6c97-a9ac-67f1-0000504bb22d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://77.89.245.118:44811/i","pattern":"[url:value = 'http://77.89.245.118:44811/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bbcecd6-5770-52ea-1dcd-00004d6e4f20","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.73.75.84:60761/i","pattern":"[url:value = 'http://212.73.75.84:60761/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccefcaf3-edaf-38bb-3ee6-0000425448c6","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1NuRs33pJXEZqHl9cIafOpya6u7I1vPKV","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1NuRs33pJXEZqHl9cIafOpya6u7I1vPKV']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b3a88fc-1e03-1887-1622-00007dfe04a0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://82.114.200.50:48416/i","pattern":"[url:value = 'http://82.114.200.50:48416/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff16f034-ffbe-acb8-b2f4-0000377c5cf1","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://78.26.180.129:37261/i","pattern":"[url:value = 'http://78.26.180.129:37261/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76a27a98-cfde-20a9-fb95-0000ea7eff28","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://58.145.168.170:25222/i","pattern":"[url:value = 'http://58.145.168.170:25222/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdcb37aa-de09-be6c-91d4-0000bc2826e9","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://138.122.43.76:56486/i","pattern":"[url:value = 'http://138.122.43.76:56486/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55c6cdaa-7733-ceea-fafd-00002cca53cb","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://124.194.46.204:44528/i","pattern":"[url:value = 'http://124.194.46.204:44528/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fd932ef-a6dd-64d9-07b8-000044b7ec4d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://37.252.66.188:12165/i","pattern":"[url:value = 'http://37.252.66.188:12165/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6931023-c8a0-6b2e-bd7d-0000edb96d4e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.2.237.104:65088/i","pattern":"[url:value = 'http://190.2.237.104:65088/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d8af92c-718a-e981-fc79-00000d32ca6d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://167.250.193.253:19901/i","pattern":"[url:value = 'http://167.250.193.253:19901/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e22ef5b-ec8d-ab0a-3884-000098192aa6","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://200.61.163.235:27538/i","pattern":"[url:value = 'http://200.61.163.235:27538/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2836c14f-150f-8ee5-00e5-000092ebfced","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.193.59.78:39941/i","pattern":"[url:value = 'http://181.193.59.78:39941/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3aad3fd6-ff37-8400-d477-00008dcbf97f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.78.201.3:62330/i","pattern":"[url:value = 'http://202.78.201.3:62330/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ece8278-bf18-e321-56f4-0000dbfd6956","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://154.0.129.114:10702/i","pattern":"[url:value = 'http://154.0.129.114:10702/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90f31d1b-fa6a-46ae-e5b2-00003fddc615","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://149.255.10.46:32625/i","pattern":"[url:value = 'http://149.255.10.46:32625/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b3b0c8c-2f00-450c-61a2-000001e70109","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.188.30.171:14759/i","pattern":"[url:value = 'http://178.188.30.171:14759/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e341958-16ed-4f05-12f6-00002c6d6715","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.151.143.2:21623/i","pattern":"[url:value = 'http://178.151.143.2:21623/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4d0cddb-f133-f03e-c43f-00008d2de45c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.211.252.34:1808/i","pattern":"[url:value = 'http://181.211.252.34:1808/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8dc6000-825b-e4d2-e42a-00001eeeb04e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://188.72.6.218:43597/i","pattern":"[url:value = 'http://188.72.6.218:43597/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcd19386-4501-4c1c-fa8f-0000ba7619bb","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.236.46.120:45209/i","pattern":"[url:value = 'http://185.236.46.120:45209/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c236341-ba43-979f-00cd-00006999eb33","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.20.138:24291/i","pattern":"[url:value = 'http://202.148.20.138:24291/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4ae47f6-14b4-f49c-1090-0000cb691d25","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://200.69.219.25:6584/i","pattern":"[url:value = 'http://200.69.219.25:6584/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79c1414e-2006-267b-722f-00008b73697f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.18.218:30944/i","pattern":"[url:value = 'http://202.148.18.218:30944/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36af24be-a136-173a-3afe-00008c37c95d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.73.75.84:60761/.i","pattern":"[url:value = 'http://212.73.75.84:60761/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c55bd325-fe45-8cef-aa86-00009c5cdfc0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://36.92.68.241:27066/.i","pattern":"[url:value = 'http://36.92.68.241:27066/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd311bb4-d271-779a-0103-0000cec9d87f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.188.30.171:14759/.i","pattern":"[url:value = 'http://178.188.30.171:14759/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0948af72-d5b0-b609-75f1-0000f29b901d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://77.89.245.118:44811/.i","pattern":"[url:value = 'http://77.89.245.118:44811/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db82bdad-f4d8-4b41-6893-0000770bb9bf","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://94.251.5.51:31559/.i","pattern":"[url:value = 'http://94.251.5.51:31559/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7969b318-26f1-5e31-dd4c-00001dc59398","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://200.122.211.138:31644/.i","pattern":"[url:value = 'http://200.122.211.138:31644/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--781f0df6-082f-a989-8ec5-00007d99390c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://78.26.180.129:37261/.i","pattern":"[url:value = 'http://78.26.180.129:37261/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6faa6e72-11b9-16cd-79d0-00006e7ef520","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://138.122.43.76:56486/.i","pattern":"[url:value = 'http://138.122.43.76:56486/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30312057-f6cd-5bb2-8ca6-000059df5933","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.92.143.90:65469/.i","pattern":"[url:value = 'http://109.92.143.90:65469/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--222096f4-ee76-5439-5d66-00005ace93d4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.190.20.228:46441/.i","pattern":"[url:value = 'http://185.190.20.228:46441/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f687df6f-6dc7-6c99-8e8f-0000c2810616","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.242.236:28115/.i","pattern":"[url:value = 'http://81.16.242.236:28115/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83207f6e-783a-4e32-3d89-000025f6e6f6","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.90.207.234:55903/.i","pattern":"[url:value = 'http://103.90.207.234:55903/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d331835-9745-8b96-77ac-0000eb1d9bc7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.236.46.120:45209/.i","pattern":"[url:value = 'http://185.236.46.120:45209/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57922d43-8ec7-b432-939a-0000b881dee7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://79.175.42.206:7773/.i","pattern":"[url:value = 'http://79.175.42.206:7773/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8494265-f9e8-bf8f-826c-00007725981e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.18.218:30944/.i","pattern":"[url:value = 'http://202.148.18.218:30944/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed146b0c-9bff-976b-7bea-000061bfda36","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://82.114.200.50:48416/.i","pattern":"[url:value = 'http://82.114.200.50:48416/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a329bdd2-e214-0844-111b-000069a2ecca","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.113.124.155:64726/.i","pattern":"[url:value = 'http://190.113.124.155:64726/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--280e7169-ebf5-bc32-b688-000062ecd099","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.123.55:41567/.i","pattern":"[url:value = 'http://81.16.123.55:41567/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--427c6490-c7cb-9639-1895-000051476ea8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.18.220:30944/.i","pattern":"[url:value = 'http://202.148.18.220:30944/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50f54d4d-7680-7872-dc64-000004346cb6","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://193.106.58.174:32789/.i","pattern":"[url:value = 'http://193.106.58.174:32789/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cfaee7b-742b-e009-36ee-000031470703","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://213.6.74.138:39286/.i","pattern":"[url:value = 'http://213.6.74.138:39286/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fcb9a63-8804-a562-e270-000039ff4900","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.71.69.198:34190/.i","pattern":"[url:value = 'http://185.71.69.198:34190/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--419c24f7-550d-1958-33cb-00004cac1e73","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.5.50.108:15808/.i","pattern":"[url:value = 'http://202.5.50.108:15808/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1729f853-1107-9574-5e71-0000045b2689","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.71.250.6:28411/.i","pattern":"[url:value = 'http://118.71.250.6:28411/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbc50dd1-732b-7a8a-4e9f-0000269d5220","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.2.237.104:65088/.i","pattern":"[url:value = 'http://190.2.237.104:65088/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d04e731-afb6-4e22-563a-0000c78d6b16","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://78.140.32.219:12617/.i","pattern":"[url:value = 'http://78.140.32.219:12617/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b291d19d-c9d0-49d4-52da-00001e963933","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://95.170.119.100:1863/.i","pattern":"[url:value = 'http://95.170.119.100:1863/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cf20d36-e87b-df13-276d-0000328d31cd","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.92.82.180:17789/.i","pattern":"[url:value = 'http://91.92.82.180:17789/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd0910ef-ea86-f1f3-b296-000065d6787b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.245.10.51:56156/.i","pattern":"[url:value = 'http://103.245.10.51:56156/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48a13422-c485-2d4e-35f3-0000d544b7e1","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.211.252.34:1808/.i","pattern":"[url:value = 'http://181.211.252.34:1808/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd31e5c2-029d-d608-4bd4-0000148a00ae","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.216.100.166:30359/.i","pattern":"[url:value = 'http://89.216.100.166:30359/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8684bc2-0ab3-b577-4a17-000036b978cc","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://95.158.175.214:23270/.i","pattern":"[url:value = 'http://95.158.175.214:23270/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59ec33d3-a224-4188-0982-0000266e05fd","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://188.72.6.218:43597/.i","pattern":"[url:value = 'http://188.72.6.218:43597/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--766ce564-7d57-f91a-b5ff-0000dca50cfe","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://41.77.74.90:10702/.i","pattern":"[url:value = 'http://41.77.74.90:10702/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efc33a3c-5acd-cf62-e777-0000fec314c6","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://93.123.169.160:27058/.i","pattern":"[url:value = 'http://93.123.169.160:27058/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58f3bdd6-31a8-e17a-997a-000008ad7f27","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.20.138:24291/.i","pattern":"[url:value = 'http://202.148.20.138:24291/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d4e16dd-daf6-6914-505d-0000fcdb3a80","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://200.69.219.25:6584/.i","pattern":"[url:value = 'http://200.69.219.25:6584/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--699ec968-ed54-a9ef-9b8b-0000bf3d0d1b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://37.252.66.188:12165/.i","pattern":"[url:value = 'http://37.252.66.188:12165/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b5b4349-e29c-0873-da02-0000acd067c0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://66.71.242.69/curl","pattern":"[url:value = 'http://66.71.242.69/curl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a231935-35c6-9b48-e06e-0000efb1baa5","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://66.71.242.70/curl","pattern":"[url:value = 'http://66.71.242.70/curl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--500790ec-7097-bf2d-c894-0000bbab7383","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://66.71.242.68/curl","pattern":"[url:value = 'http://66.71.242.68/curl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1512239-c1fc-61f8-fd4b-00006412bc52","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://66.71.242.67/curl","pattern":"[url:value = 'http://66.71.242.67/curl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fffcadef-0edc-b808-a1df-0000f96aae5f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.145.205.178:6360/i","pattern":"[url:value = 'http://190.145.205.178:6360/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8f12239-dbef-ec94-b824-0000b2c41fa3","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.107.232.167:21838/i","pattern":"[url:value = 'http://212.107.232.167:21838/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b4f301f-7566-7b99-587c-0000da29cb8a","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://116.58.51.90:1162/i","pattern":"[url:value = 'http://116.58.51.90:1162/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb6e7a5e-969b-3c87-eec2-0000ed8e9bfc","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.245.220.229:44759/i","pattern":"[url:value = 'http://109.245.220.229:44759/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7d6b634-d8fe-65e5-97d6-00000a3b76ca","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://151.236.247.230:19193/i","pattern":"[url:value = 'http://151.236.247.230:19193/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2790a190-b692-d926-333c-00004e76e395","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.5.34:35700/i","pattern":"[url:value = 'http://202.148.5.34:35700/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fae81a6-70cb-a78c-99b2-00003a754306","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://182.253.115.155:59323/.i","pattern":"[url:value = 'http://182.253.115.155:59323/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--928ee236-129d-bbeb-29e9-0000b2d8e357","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.249.96:46703/.i","pattern":"[url:value = 'http://81.16.249.96:46703/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7817cdb0-6348-cfe6-8963-0000ccaf9702","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://151.236.247.230:19193/.i","pattern":"[url:value = 'http://151.236.247.230:19193/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a97cec56-753e-e66c-ae3c-0000373f96f2","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.5.34:35700/.i","pattern":"[url:value = 'http://202.148.5.34:35700/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2923628-8a8b-3ad3-89bd-000055353139","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.87.223.241:39478/.i","pattern":"[url:value = 'http://109.87.223.241:39478/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06e99699-0839-8988-28c2-0000f879b197","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.107.232.167:21838/.i","pattern":"[url:value = 'http://212.107.232.167:21838/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4c7ad76-3dcb-6c99-c646-0000baa3c42f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://116.58.51.90:1162/.i","pattern":"[url:value = 'http://116.58.51.90:1162/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--691eecf7-23f2-c261-c470-00004c39a111","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.145.205.178:6360/.i","pattern":"[url:value = 'http://190.145.205.178:6360/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d54cfd3a-d2ef-106a-c006-000003f2b776","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.245.220.229:44759/.i","pattern":"[url:value = 'http://109.245.220.229:44759/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b49dd828-f349-49bc-9285-00000577f2ac","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://88.116.62.226:52714/.i","pattern":"[url:value = 'http://88.116.62.226:52714/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fc92216-46a1-ccec-c99e-0000a9d7a677","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.231.14.137:2282/.i","pattern":"[url:value = 'http://89.231.14.137:2282/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba9530ce-7752-50bb-b32d-00003064af66","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://68.226.36.150:1123/sshd","pattern":"[url:value = 'http://68.226.36.150:1123/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f052ddec-2f3d-f637-1137-0000e57de710","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://174.71.237.86:1109/sshd","pattern":"[url:value = 'http://174.71.237.86:1109/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36375b21-0c3b-c56f-7e31-00002c0b48df","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://102.68.74.45:8088/sshd","pattern":"[url:value = 'http://102.68.74.45:8088/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--447f759e-1f28-711e-168e-00009109310e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://31.222.113.214:49012/sshd","pattern":"[url:value = 'http://31.222.113.214:49012/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a089775-251b-a26a-783d-000096977bc0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.164.39.142:50003/sshd","pattern":"[url:value = 'http://91.164.39.142:50003/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--270da7cd-9632-77bc-9daf-0000f2f61609","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.164.39.142:50004/sshd","pattern":"[url:value = 'http://91.164.39.142:50004/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec517468-3854-d6f1-136d-0000e58d024a","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.164.39.142:50005/sshd","pattern":"[url:value = 'http://91.164.39.142:50005/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50ab1445-301d-7852-f1c1-0000ed8da7e0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://112.4.110.42:37782/sshd","pattern":"[url:value = 'http://112.4.110.42:37782/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b40c8f38-19a7-21df-13b3-00006ba3399d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://223.108.58.15:37782/sshd","pattern":"[url:value = 'http://223.108.58.15:37782/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ec9f666-1039-d13f-fcf1-00001872ce6d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://165.73.108.6:8027/sshd","pattern":"[url:value = 'http://165.73.108.6:8027/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51c9fe8a-d381-8cef-5afc-000070536d8e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://174.71.237.86:1103/sshd","pattern":"[url:value = 'http://174.71.237.86:1103/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b856650-3916-6b8c-6f2c-000036bfd0ab","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://46.250.54.75:84/sshd","pattern":"[url:value = 'http://46.250.54.75:84/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be963f59-fe2e-0f20-457b-0000d6a94c62","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://80.14.38.66:1081/sshd","pattern":"[url:value = 'http://80.14.38.66:1081/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e558b470-3855-ccf4-f5c4-0000459e9f61","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://165.73.108.6:8023/sshd","pattern":"[url:value = 'http://165.73.108.6:8023/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a890157b-036c-0a83-3db8-00006b68b7e7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://165.73.108.6:8021/sshd","pattern":"[url:value = 'http://165.73.108.6:8021/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b312ad8-80bb-ec9e-bc84-00004959ed6f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://223.108.58.13:37782/sshd","pattern":"[url:value = 'http://223.108.58.13:37782/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--688b0624-27e8-af1a-d0ef-0000e70256d4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://24.234.159.5:1112/sshd","pattern":"[url:value = 'http://24.234.159.5:1112/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f4765cc-d659-25b5-6460-00009cf16144","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.93.103.10:51080/sshd","pattern":"[url:value = 'http://212.93.103.10:51080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc41e8d1-4da3-d0d5-1033-0000ef411287","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.176.204.250:83/sshd","pattern":"[url:value = 'http://178.176.204.250:83/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c015f81-689b-5dd6-16eb-00005ea54508","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://174.71.237.86:1101/sshd","pattern":"[url:value = 'http://174.71.237.86:1101/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ac506c6-cdd5-4d00-45c2-0000dc003e8f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.164.39.142:50006/sshd","pattern":"[url:value = 'http://91.164.39.142:50006/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88b5c0b7-50df-a3f1-2b17-000044963dfe","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://31.0.241.65:8082/sshd","pattern":"[url:value = 'http://31.0.241.65:8082/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3539cf6e-7465-1ea6-e299-0000a558e038","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.69.157.212:9114/sshd","pattern":"[url:value = 'http://118.69.157.212:9114/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7284a433-4dd2-050a-1752-0000f2e520c1","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://188.170.32.148:84/sshd","pattern":"[url:value = 'http://188.170.32.148:84/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d9ab9f6-3b78-7a76-d3c1-000060e225ea","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://144.6.87.144:2400/sshd","pattern":"[url:value = 'http://144.6.87.144:2400/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f15444d0-fdd5-e9ea-6aed-000081ec6f83","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.164.39.142:50002/sshd","pattern":"[url:value = 'http://91.164.39.142:50002/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50cf67b6-9a40-21d2-053b-000014c2e51d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.164.39.142:50008/sshd","pattern":"[url:value = 'http://91.164.39.142:50008/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36407d6d-034b-a950-107c-000058345bc0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://31.173.70.100:86/sshd","pattern":"[url:value = 'http://31.173.70.100:86/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44c39716-73e5-27a2-a81d-0000d0b015ff","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://165.73.108.6:8029/sshd","pattern":"[url:value = 'http://165.73.108.6:8029/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65f45edd-fd06-842b-d5d7-0000efcfa577","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.69.157.212:9111/sshd","pattern":"[url:value = 'http://118.69.157.212:9111/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63ccc6de-c1db-0425-86db-00007c13a3a4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://165.73.108.6:8020/sshd","pattern":"[url:value = 'http://165.73.108.6:8020/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3301576d-1760-329e-05d4-00003684e6eb","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://165.73.108.6:8025/sshd","pattern":"[url:value = 'http://165.73.108.6:8025/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71c9e36b-edee-8dce-a4f7-0000271fbb25","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://68.226.36.150:1122/sshd","pattern":"[url:value = 'http://68.226.36.150:1122/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70ed0141-adea-4b13-ab9f-0000428e0dad","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.2.229.122:8003/sshd","pattern":"[url:value = 'http://185.2.229.122:8003/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0728db53-94db-99a9-5362-0000cdf5616e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.69.157.212:9219/sshd","pattern":"[url:value = 'http://118.69.157.212:9219/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e0467d5-c006-3511-6c3b-000052e58b22","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://165.73.108.6:8022/sshd","pattern":"[url:value = 'http://165.73.108.6:8022/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e934023d-57e5-385a-52df-0000cb47a5b3","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://82.148.194.54:9013/sshd","pattern":"[url:value = 'http://82.148.194.54:9013/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc372318-15a7-bd7b-dcae-0000e05765d4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://92.66.30.68:9013/sshd","pattern":"[url:value = 'http://92.66.30.68:9013/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c029bfea-6e7d-8381-6ae4-000071ec3a03","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://188.147.175.138:5002//sshd","pattern":"[url:value = 'http://188.147.175.138:5002//sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed47f6bf-fb9b-dbb9-3b7a-0000902a6e66","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.176.204.250:84//sshd","pattern":"[url:value = 'http://178.176.204.250:84//sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a778760-5cb8-fc5a-e1f4-0000060264a7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://76.53.38.126:8085/sshd","pattern":"[url:value = 'http://76.53.38.126:8085/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32921bb3-46d7-79a5-2076-000084593c27","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://123.143.141.75:10005/sshd","pattern":"[url:value = 'http://123.143.141.75:10005/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77bf266b-96fa-5c60-a632-000028f44c21","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://76.53.38.126:8087/sshd","pattern":"[url:value = 'http://76.53.38.126:8087/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32ff9d24-2fea-8cb3-3f84-000022dfb07a","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.42.247.62:8086/sshd","pattern":"[url:value = 'http://81.42.247.62:8086/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--550c8f0b-c6c7-aafe-e9ca-00004d8e62b5","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://76.53.38.126:8888/sshd","pattern":"[url:value = 'http://76.53.38.126:8888/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bce3f5ce-7c5c-fa3a-b274-00003f8f5862","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://76.53.38.126:8086/sshd","pattern":"[url:value = 'http://76.53.38.126:8086/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9edbf052-b566-f127-9bcd-00009ef3550f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://141.134.214.217:8003/sshd","pattern":"[url:value = 'http://141.134.214.217:8003/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac33f4a7-2adf-ac31-44ad-0000e7414b48","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://95.230.215.65/sshd","pattern":"[url:value = 'http://95.230.215.65/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9de2057b-ae88-b15b-4bb0-00009fa1b593","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://223.82.83.143:8888/sshd","pattern":"[url:value = 'http://223.82.83.143:8888/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b46bef8a-ff95-0ee6-720d-00001b528cbf","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.42.247.62:8085/sshd","pattern":"[url:value = 'http://81.42.247.62:8085/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62320c97-ccf3-832c-52bc-00006848f535","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.42.247.62:8083/sshd","pattern":"[url:value = 'http://81.42.247.62:8083/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2772b7d8-1919-42ad-c5a6-00006263096e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://76.53.38.126:8082/sshd","pattern":"[url:value = 'http://76.53.38.126:8082/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9a34e81-9840-da4c-8caf-000035a4a439","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.42.247.62:8087/sshd","pattern":"[url:value = 'http://81.42.247.62:8087/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d76571a-1821-9109-cd10-0000a95b7c0f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://80.24.87.77:8057/sshd","pattern":"[url:value = 'http://80.24.87.77:8057/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3b67057-c741-bda5-e335-000090b81267","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.183.208.134:8080/sshd","pattern":"[url:value = 'http://178.183.208.134:8080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f373c2f-825a-7d5a-239d-00000c2998fc","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.42.247.62:8084/sshd","pattern":"[url:value = 'http://81.42.247.62:8084/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--123ad67b-28bf-77ea-6802-0000bdbc7926","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://132.255.192.122:9001/sshd","pattern":"[url:value = 'http://132.255.192.122:9001/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78eaa3f2-bf94-c912-1f3b-000087c30624","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.183.208.134:8081/sshd","pattern":"[url:value = 'http://178.183.208.134:8081/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bde20096-5905-64c5-ab5f-000043ec0205","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://188.147.175.138:5002/sshd","pattern":"[url:value = 'http://188.147.175.138:5002/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a96edf32-cfd2-ab6d-af8e-00007f33e176","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.42.247.62:8082/sshd","pattern":"[url:value = 'http://81.42.247.62:8082/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--562a84bf-427c-276b-9fae-0000be20684c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://80.24.87.77:8056/sshd","pattern":"[url:value = 'http://80.24.87.77:8056/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee1f748a-1e7c-cd61-7628-0000de8f6a11","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://24.234.159.5:1111/sshd","pattern":"[url:value = 'http://24.234.159.5:1111/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43fade35-3be5-efb9-c4ba-000094059105","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://102.216.105.81/sshd","pattern":"[url:value = 'http://102.216.105.81/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db1928c7-5841-3beb-3a01-000059a0c3da","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.3.211.157:50080/sshd","pattern":"[url:value = 'http://212.3.211.157:50080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--569add76-7486-6021-cad6-000080469012","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://82.77.57.16:8585/sshd","pattern":"[url:value = 'http://82.77.57.16:8585/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9c42e33-87e0-c79f-8602-00004555111b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://223.108.58.15:37780/sshd","pattern":"[url:value = 'http://223.108.58.15:37780/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b406691d-ff02-edf9-a94f-0000bdd400e2","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://123.143.141.75:10006/sshd","pattern":"[url:value = 'http://123.143.141.75:10006/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bf20095-0386-c78b-9260-00005c1dac9e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://221.10.233.217:8618/sshd","pattern":"[url:value = 'http://221.10.233.217:8618/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9909bfa6-6428-a166-d46f-000033026e36","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=18opq2_cUhGveZLdmmbuzKT3tp3u8sGR_","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=18opq2_cUhGveZLdmmbuzKT3tp3u8sGR_']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1393e0d-1814-62c2-7dda-0000e26e4559","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://170.210.81.104/tftp","pattern":"[url:value = 'http://170.210.81.104/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2e47cd1-7f6b-6769-cf87-00005cd00ad0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.57.39.2:19001/tftp","pattern":"[url:value = 'http://202.57.39.2:19001/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e47f4f30-7531-5c5b-37dd-000067469fbd","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.108.63.242/tftp","pattern":"[url:value = 'http://190.108.63.242/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4406037d-6d6e-6252-62f0-00006a11481f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://182.72.167.124/tftp","pattern":"[url:value = 'http://182.72.167.124/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01688c2a-289d-add6-ec5b-000015f3b8b4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.224.107.4:8580/tftp","pattern":"[url:value = 'http://185.224.107.4:8580/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e12c14d8-eab2-752b-b8a1-00006b9a9a71","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.184.185.198:4443/tftp","pattern":"[url:value = 'http://89.184.185.198:4443/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30c38f2b-1218-6d1a-6529-00007e18fb11","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://45.118.79.103:8892/tftp","pattern":"[url:value = 'http://45.118.79.103:8892/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a4b679c-47d1-ebcf-e000-0000cbcd61d8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1pJT23VHTWzYZypmTN3-lAqCtzZr5Vb5d","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1pJT23VHTWzYZypmTN3-lAqCtzZr5Vb5d']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07d50b85-5452-2588-e7f4-000006c56352","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://down.ftp21.cc/TQ.jpg","pattern":"[url:value = 'http://down.ftp21.cc/TQ.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbe5e032-56be-7833-1545-00005d8791f0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://85.175.101.203/02.08.2022.exe","pattern":"[url:value = 'http://85.175.101.203/02.08.2022.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5055372-6160-6de6-af58-000042ff033d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121419if_/http://154.216.19.139/bins/mirai.mips","pattern":"[url:value = 'http://web.archive.org/web/20240808121419if_/http://154.216.19.139/bins/mirai.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a1ae5ee-8900-c2e4-8f3b-0000896146dd","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808122936if_/http://154.216.19.139/bins/mirai.gnueabihf","pattern":"[url:value = 'http://web.archive.org/web/20240808122936if_/http://154.216.19.139/bins/mirai.gnueabihf']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f899a86-8bec-04b6-a0b4-00000e047b97","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808120646if_/http://154.216.19.139/bins/mirai.armv4l","pattern":"[url:value = 'http://web.archive.org/web/20240808120646if_/http://154.216.19.139/bins/mirai.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9449f7c3-e1e2-3cae-badf-00003362e36d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808120945if_/http://154.216.19.139/bins/mirai.armv5l","pattern":"[url:value = 'http://web.archive.org/web/20240808120945if_/http://154.216.19.139/bins/mirai.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6d06d68-a757-7f75-80d4-0000e43218fe","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121832if_/http://154.216.19.139/bins/mirai.mipsel","pattern":"[url:value = 'http://web.archive.org/web/20240808121832if_/http://154.216.19.139/bins/mirai.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9ca59f1-f15c-df34-6e8c-000050b89103","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808123114if_/http://154.216.19.139/bins/mirai.arc","pattern":"[url:value = 'http://web.archive.org/web/20240808123114if_/http://154.216.19.139/bins/mirai.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--509e529c-0d95-44e4-02c1-00009f4585ff","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121121if_/http://154.216.19.139/bins/mirai.armv7l","pattern":"[url:value = 'http://web.archive.org/web/20240808121121if_/http://154.216.19.139/bins/mirai.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d630c78d-d036-8642-9a04-0000bff9bc8e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121347if_/http://154.216.19.139/bins/mirai.m68k","pattern":"[url:value = 'http://web.archive.org/web/20240808121347if_/http://154.216.19.139/bins/mirai.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8752dd32-1940-c2fa-826c-0000626aff5d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808122159if_/http://154.216.19.139/bins/mirai.powerpc","pattern":"[url:value = 'http://web.archive.org/web/20240808122159if_/http://154.216.19.139/bins/mirai.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53630681-5792-6d24-9d33-00009660a32e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121308if_/http://154.216.19.139/bins/mirai.i686","pattern":"[url:value = 'http://web.archive.org/web/20240808121308if_/http://154.216.19.139/bins/mirai.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49da0564-b32f-68df-5952-0000a0d9e994","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121041if_/http://154.216.19.139/bins/mirai.armv6l","pattern":"[url:value = 'http://web.archive.org/web/20240808121041if_/http://154.216.19.139/bins/mirai.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25d02a06-b458-17b0-af51-0000194327c5","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808122755if_/http://154.216.19.139/bins/mirai.x86_64","pattern":"[url:value = 'http://web.archive.org/web/20240808122755if_/http://154.216.19.139/bins/mirai.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--568971f3-76ad-6f6d-16c4-0000e1b4fb42","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808120223if_/http://154.216.19.139/bins/mirai.bin","pattern":"[url:value = 'http://web.archive.org/web/20240808120223if_/http://154.216.19.139/bins/mirai.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--103c748f-15d5-ced4-fec4-00007a23d976","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121308if_/http:/154.216.19.139/bins/mirai.i686","pattern":"[url:value = 'http://web.archive.org/web/20240808121308if_/http:/154.216.19.139/bins/mirai.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1562f475-9655-cccc-3f24-00007520cbcd","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808122636if_/http:/154.216.19.139/bins/mirai.sparc","pattern":"[url:value = 'http://web.archive.org/web/20240808122636if_/http:/154.216.19.139/bins/mirai.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--402a2b52-8a40-b553-8a3f-000036858b8f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121230if_/http:/154.216.19.139/bins/mirai.i586","pattern":"[url:value = 'http://web.archive.org/web/20240808121230if_/http:/154.216.19.139/bins/mirai.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7979937f-7148-1935-4700-0000d86e7afb","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121832if_/http:/154.216.19.139/bins/mirai.mipsel","pattern":"[url:value = 'http://web.archive.org/web/20240808121832if_/http:/154.216.19.139/bins/mirai.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2954ce42-a507-d81f-93df-0000be177304","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808122159if_/http:/154.216.19.139/bins/mirai.powerpc","pattern":"[url:value = 'http://web.archive.org/web/20240808122159if_/http:/154.216.19.139/bins/mirai.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0305393b-9a97-1bb5-5fe9-0000a2a636e9","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808120945if_/http:/154.216.19.139/bins/mirai.armv5l","pattern":"[url:value = 'http://web.archive.org/web/20240808120945if_/http:/154.216.19.139/bins/mirai.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3d65cda-b716-ab44-4c16-00000dd69032","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808122936if_/http:/154.216.19.139/bins/mirai.gnueabihf","pattern":"[url:value = 'http://web.archive.org/web/20240808122936if_/http:/154.216.19.139/bins/mirai.gnueabihf']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0bb0667-110e-c6fb-de1b-0000b3075539","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.121.250.206:8080/tftp","pattern":"[url:value = 'http://89.121.250.206:8080/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--329858d5-bfa3-3b79-75e9-0000f3827e6d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://93.182.76.169:81/tftp","pattern":"[url:value = 'http://93.182.76.169:81/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b40c2a7b-7aca-93e0-bfcd-0000ca0f42a8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://93.182.76.169:82/tftp","pattern":"[url:value = 'http://93.182.76.169:82/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01acabc2-94b0-3c11-ca8f-0000f4ce8d60","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.104.213.45:6004/tftp","pattern":"[url:value = 'http://190.104.213.45:6004/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e216cea-ed5c-9024-c296-0000d5222413","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://103.54.153.49/XClient.exe","pattern":"[url:value = 'https://103.54.153.49/XClient.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c39ef6dd-2767-1ade-1a20-000024761b76","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://soft.wsyhn.com/soft/wnbsqv3008.exe","pattern":"[url:value = 'https://soft.wsyhn.com/soft/wnbsqv3008.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcaf34b6-65ab-8ff4-192a-0000c8e68a5e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.166.211.222:6202/sshd","pattern":"[url:value = 'http://109.166.211.222:6202/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d5f2567-2635-9334-93c9-0000aac90484","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://102.68.74.69:8055/sshd","pattern":"[url:value = 'http://102.68.74.69:8055/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73bcabc9-25d3-cf5f-b904-0000e52c7297","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.211.135.170:12768/i","pattern":"[url:value = 'http://178.211.135.170:12768/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af6b7cd8-c1b4-480b-967a-00002e06afa3","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://83.218.189.21:5195/i","pattern":"[url:value = 'http://83.218.189.21:5195/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df5a8c80-fa0c-d6b0-05e2-000009cb315c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.105.196.30:52286/i","pattern":"[url:value = 'http://202.105.196.30:52286/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7208653-6f73-4804-27f8-0000cc3bcaf5","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://77.238.209.82:26331/i","pattern":"[url:value = 'http://77.238.209.82:26331/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86bc404b-de6f-1d02-faee-0000ba1797ab","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://77.46.170.18:53326/i","pattern":"[url:value = 'http://77.46.170.18:53326/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71b4bb80-2766-563c-8115-0000de7e5eb9","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://88.116.62.226:52714/i","pattern":"[url:value = 'http://88.116.62.226:52714/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0e71873-05ae-edec-061f-00001eb47c95","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://206.214.35.106:20647/i","pattern":"[url:value = 'http://206.214.35.106:20647/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--975576b2-0360-98ac-c071-000050c8144c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://184.185.30.182:29029/i","pattern":"[url:value = 'http://184.185.30.182:29029/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e5844c9-b7d8-c3cd-b8d5-00009badbba8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://213.91.236.237:10713/i","pattern":"[url:value = 'http://213.91.236.237:10713/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ad21f1f-2584-32df-269e-0000468b1caf","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://41.78.75.186:30763/i","pattern":"[url:value = 'http://41.78.75.186:30763/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d88e3eab-bbd3-a62b-0119-00006a9e42ad","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.131.234.26:51118/i","pattern":"[url:value = 'http://202.131.234.26:51118/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8054de7-3e67-324f-476d-00006d664694","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.98.186.8:6819/i","pattern":"[url:value = 'http://212.98.186.8:6819/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9ba3536-226e-4237-09ac-00005d154451","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.160.87.2:31378/i","pattern":"[url:value = 'http://109.160.87.2:31378/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a9d16f2-abad-6cb2-fca9-0000d010b864","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://88.135.26.83:32710/i","pattern":"[url:value = 'http://88.135.26.83:32710/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d3c8e76-0ae3-7e84-39cc-00002e659813","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://78.26.81.99:58230/i","pattern":"[url:value = 'http://78.26.81.99:58230/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6a8f739-828d-a3cc-021e-00005c3cc7f7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://176.221.111.222:2282/i","pattern":"[url:value = 'http://176.221.111.222:2282/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73be984d-34b0-8e8d-e32b-00001975c5d7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.57.69.125:16138/i","pattern":"[url:value = 'http://185.57.69.125:16138/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b11f4abc-f6f1-7af2-b9b5-0000bface811","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://203.160.56.67:12929/i","pattern":"[url:value = 'http://203.160.56.67:12929/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a75b3810-e33c-1bcb-00df-00000376d2fe","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.187.151.107:1500/Mozi.m","pattern":"[url:value = 'http://103.187.151.107:1500/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ad9a08d-1f7f-425b-1cd7-00004c931bae","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://184.185.30.182:29029/Mozi.m","pattern":"[url:value = 'http://184.185.30.182:29029/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--282116d3-6cf6-cef8-aa69-00002b486b66","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://121.43.104.75:8080/help.scr","pattern":"[url:value = 'http://121.43.104.75:8080/help.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--865de2ec-edac-b814-706c-00002d1cd0cb","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.98.186.8:6819/Mozi.m","pattern":"[url:value = 'http://212.98.186.8:6819/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f993840-f073-0e5b-0479-00001aa05ffa","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.92.82.180:17789/Mozi.m","pattern":"[url:value = 'http://91.92.82.180:17789/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2776ee12-f88d-90c7-34e8-0000924f38fc","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.227.118.45:56789/Mozi.m","pattern":"[url:value = 'http://103.227.118.45:56789/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93f450b0-6579-f2a9-b8e6-00003143d07c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://78.26.81.99:58230/Mozi.m","pattern":"[url:value = 'http://78.26.81.99:58230/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31519ed3-1df0-50be-8850-000088170800","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://41.78.75.186:30763/Mozi.m","pattern":"[url:value = 'http://41.78.75.186:30763/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c0c184c-b437-9b55-4ebf-0000065be514","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://36.66.139.36:53736/Mozi.m","pattern":"[url:value = 'http://36.66.139.36:53736/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1c7d2c7-5489-0da7-dde6-0000d6983514","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://203.160.56.67:12929/Mozi.m","pattern":"[url:value = 'http://203.160.56.67:12929/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52325864-8cf5-8d1c-2b9b-0000011da0dc","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://176.221.111.222:2282/Mozi.m","pattern":"[url:value = 'http://176.221.111.222:2282/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f57fde3-7ecb-444d-5a4a-00000bcf70df","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://77.46.170.18:53326/Mozi.m","pattern":"[url:value = 'http://77.46.170.18:53326/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3461dc1-bbff-d0f5-1975-000004c83193","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://213.6.74.138:39286/Mozi.m","pattern":"[url:value = 'http://213.6.74.138:39286/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49024309-ae6f-5c0f-9806-0000cefd0382","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://182.160.102.188:16079/Mozi.m","pattern":"[url:value = 'http://182.160.102.188:16079/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f9541f4-b009-8819-e43b-00002fbc8742","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.236.46.120:45209/Mozi.m","pattern":"[url:value = 'http://185.236.46.120:45209/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90061387-051c-8ab4-497b-00009880ac9c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.18.218:30944/Mozi.m","pattern":"[url:value = 'http://202.148.18.218:30944/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f296e91-2be7-f5ff-a7a6-0000b16b4903","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://200.61.163.235:27538/Mozi.m","pattern":"[url:value = 'http://200.61.163.235:27538/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8ac1ab3-f5b9-b33b-781f-00005c231017","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.151.143.2:21623/Mozi.m","pattern":"[url:value = 'http://178.151.143.2:21623/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8e4613c-3b9d-8b54-d9bb-000002862515","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://88.135.26.83:32710/Mozi.m","pattern":"[url:value = 'http://88.135.26.83:32710/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cc4cdd0-14f2-61d6-0de3-00009ba2dfb8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.211.135.170:12768/Mozi.m","pattern":"[url:value = 'http://178.211.135.170:12768/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b51b934d-1b2c-9340-9ac8-00005c3d4bbd","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://88.116.62.226:52714/Mozi.m","pattern":"[url:value = 'http://88.116.62.226:52714/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--181d644f-c85e-52dc-29da-0000ed274d31","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://183.81.156.121:12929/Mozi.m","pattern":"[url:value = 'http://183.81.156.121:12929/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30a7716b-8551-cbef-ca95-0000ce621fa3","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://41.77.74.90:10702/Mozi.m","pattern":"[url:value = 'http://41.77.74.90:10702/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cc66d73-37db-8f7f-12e5-00000095e1b4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://154.0.129.134:10702/Mozi.m","pattern":"[url:value = 'http://154.0.129.134:10702/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e683f2b-076b-581c-151a-0000dbd92f67","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.242.236:28115/Mozi.m","pattern":"[url:value = 'http://81.16.242.236:28115/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4b63845-aabe-d528-783b-0000b7baa063","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.231.14.137:2282/Mozi.m","pattern":"[url:value = 'http://89.231.14.137:2282/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69f851ed-9f26-dc1b-b2c7-0000458a100f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://186.154.93.81:8125/Mozi.m","pattern":"[url:value = 'http://186.154.93.81:8125/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc723566-f738-b911-a2d6-0000a4162066","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://98.103.171.36:19021/Mozi.m","pattern":"[url:value = 'http://98.103.171.36:19021/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dede90b8-2517-35fa-3228-00002f119f11","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.160.87.2:31378/Mozi.m","pattern":"[url:value = 'http://109.160.87.2:31378/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71e3e35a-f002-e27c-53a0-0000d90dfd54","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.179.203.50:40889/Mozi.m","pattern":"[url:value = 'http://118.179.203.50:40889/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa0aae09-86fd-19f6-9184-00002bf606f2","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.188.30.171:14759/Mozi.m","pattern":"[url:value = 'http://178.188.30.171:14759/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f89a3c9f-9382-e259-b011-00006110b93e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://95.158.175.214:23270/Mozi.m","pattern":"[url:value = 'http://95.158.175.214:23270/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb086f25-51dd-c28a-c683-0000264e3e14","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.217.215.238:17645/Mozi.m","pattern":"[url:value = 'http://103.217.215.238:17645/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90c8ba2d-d479-e9ae-78f2-00004f769c3d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.12.78.161:36220/Mozi.m","pattern":"[url:value = 'http://185.12.78.161:36220/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--352eb645-f452-8e4f-6745-0000ec6e0e41","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.87.223.241:39478/Mozi.m","pattern":"[url:value = 'http://109.87.223.241:39478/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--517e5541-9527-e0c7-61f0-0000f55f5722","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://138.122.43.76:56486/Mozi.m","pattern":"[url:value = 'http://138.122.43.76:56486/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--594a79cd-c50d-d2be-2831-000005f52ad5","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://206.214.35.106:20647/Mozi.m","pattern":"[url:value = 'http://206.214.35.106:20647/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bda69d25-654a-9267-2d9f-000031aa3392","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.211.252.34:1808/Mozi.m","pattern":"[url:value = 'http://181.211.252.34:1808/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf7c1368-0ebf-9279-8c87-00008aeea37c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.20.138:24291/Mozi.m","pattern":"[url:value = 'http://202.148.20.138:24291/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1309d001-f42c-2dee-d39e-00000d505231","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.179.121.235:1123/Mozi.m","pattern":"[url:value = 'http://118.179.121.235:1123/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--098afc35-0097-7df1-292e-000063b2a653","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://77.89.245.118:44811/Mozi.m","pattern":"[url:value = 'http://77.89.245.118:44811/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e85aab3-2ecb-ccf9-600f-0000fa542615","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.90.207.234:55903/Mozi.m","pattern":"[url:value = 'http://103.90.207.234:55903/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fac5c972-915b-4e67-60d2-00005235a352","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://37.57.33.51:49049/Mozi.m","pattern":"[url:value = 'http://37.57.33.51:49049/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e658a7a-8412-2cfe-d3c1-000051a44d70","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://195.34.91.22:61437/Mozi.m","pattern":"[url:value = 'http://195.34.91.22:61437/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f882049-9aae-76d0-ae20-0000fddadc1e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://37.255.217.87:32902/Mozi.m","pattern":"[url:value = 'http://37.255.217.87:32902/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11a6823e-6f91-a525-c71b-0000ec837131","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.113.124.155:64726/Mozi.m","pattern":"[url:value = 'http://190.113.124.155:64726/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff46fed1-3586-9833-d542-00006dbd32c0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://182.253.115.156:59323/Mozi.m","pattern":"[url:value = 'http://182.253.115.156:59323/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a33e87e4-9111-dc62-2b30-0000ef3e2e56","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.5.50.108:15808/Mozi.m","pattern":"[url:value = 'http://202.5.50.108:15808/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b22267c8-a999-ef51-8f67-000094163e60","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.18.220:30944/Mozi.m","pattern":"[url:value = 'http://202.148.18.220:30944/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6a30630-c749-b128-7364-0000c998f53c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://124.194.46.204:44528/Mozi.m","pattern":"[url:value = 'http://124.194.46.204:44528/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19a39fb9-9a1b-2abe-c454-000087ffe4af","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.49.47.190:46516/Mozi.m","pattern":"[url:value = 'http://181.49.47.190:46516/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe1e6bde-4375-4d40-516f-00000f67d265","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.71.250.6:28411/Mozi.m","pattern":"[url:value = 'http://118.71.250.6:28411/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c95c0690-91e0-e399-6852-00003de247ce","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://36.88.180.115:20043/Mozi.m","pattern":"[url:value = 'http://36.88.180.115:20043/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a72d1747-eeeb-b215-f4f7-0000c1ff06af","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://167.250.193.253:19901/Mozi.m","pattern":"[url:value = 'http://167.250.193.253:19901/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31d7aed8-6816-721c-015b-00005fdff707","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://94.251.5.51:31559/Mozi.m","pattern":"[url:value = 'http://94.251.5.51:31559/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--255763b5-88f9-1cbc-1975-00008c3c8543","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.108.84.121:28531/Mozi.m","pattern":"[url:value = 'http://109.108.84.121:28531/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b1f3f98-618f-bcb9-61d1-0000d2a08b64","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.105.196.30:52286/Mozi.m","pattern":"[url:value = 'http://202.105.196.30:52286/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0a4ff9d-4c58-e020-05f8-00004322f46e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://37.252.66.188:12165/Mozi.m","pattern":"[url:value = 'http://37.252.66.188:12165/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fa3726d-bb34-e6d9-505f-0000e6aff4f4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.212.35.175:8081/sshd","pattern":"[url:value = 'http://118.212.35.175:8081/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22e071eb-33bc-2dcc-cc59-0000c7efd002","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.183.205.197:85/sshd","pattern":"[url:value = 'http://178.183.205.197:85/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--394e7c26-7107-2002-4668-0000da5825a8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://14.161.6.225:8888/sshd","pattern":"[url:value = 'http://14.161.6.225:8888/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b0f3e32-9562-2a04-ddb4-000002e372a7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.45.183.125:10062/sshd","pattern":"[url:value = 'http://81.45.183.125:10062/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd783586-10dd-644a-519f-0000ed211999","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.45.183.125:10072/sshd","pattern":"[url:value = 'http://81.45.183.125:10072/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b05aba1c-47ad-0cff-dbee-000074dee1d2","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.43.16.137:8093/sshd","pattern":"[url:value = 'http://185.43.16.137:8093/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef130b2d-9a8c-4a4a-13f3-0000a3a908e7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://213.96.13.100:10097/sshd","pattern":"[url:value = 'http://213.96.13.100:10097/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eccb3265-cc17-ed77-ee31-00005bac03c0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://87.97.161.106:8085/sshd","pattern":"[url:value = 'http://87.97.161.106:8085/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea800426-418b-212d-05b9-000041623932","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.35.233.220:8083/sshd","pattern":"[url:value = 'http://89.35.233.220:8083/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a92d178-9353-f92d-7e5d-000028b67a4a","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://87.97.161.106:8083/sshd","pattern":"[url:value = 'http://87.97.161.106:8083/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc0e1caa-1014-8608-2434-00002156ed9e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://92.203.169.41/sshd","pattern":"[url:value = 'http://92.203.169.41/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a5f40cb-67d7-1ad1-3de9-000062213f05","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://87.97.161.106:8086/sshd","pattern":"[url:value = 'http://87.97.161.106:8086/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--409983ca-da17-302c-1e89-0000f133b610","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://80.28.228.106:9014/sshd","pattern":"[url:value = 'http://80.28.228.106:9014/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c147688-53ff-138d-1c10-000078ef05f7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.35.233.220:8080/sshd","pattern":"[url:value = 'http://89.35.233.220:8080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6afd433-8232-5294-eab9-00007166a0c3","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.191.89.122:1591/sshd","pattern":"[url:value = 'http://185.191.89.122:1591/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21dcd783-3299-a2d0-4d73-000056192d71","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.35.233.220:8082/sshd","pattern":"[url:value = 'http://89.35.233.220:8082/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b11900a4-cf1e-484e-95bc-00004e6c1863","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://85.130.160.219:37783/sshd","pattern":"[url:value = 'http://85.130.160.219:37783/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4740345-1ecc-305a-b752-0000fe62ecc7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.183.205.197:86/sshd","pattern":"[url:value = 'http://178.183.205.197:86/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69877983-03c2-c45a-c8d1-00009a243422","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://213.96.13.100:10094/sshd","pattern":"[url:value = 'http://213.96.13.100:10094/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b27f13e-83dc-72ca-50a6-0000722ee898","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://166.147.146.187:8044/sshd","pattern":"[url:value = 'http://166.147.146.187:8044/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de2132dc-5bd0-91d5-3000-0000d1fccd0b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.207.217.114:1026/sshd","pattern":"[url:value = 'http://109.207.217.114:1026/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc623c84-5f74-5a00-adf9-0000c2058fb5","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.3.211.157:51080/sshd","pattern":"[url:value = 'http://212.3.211.157:51080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4346c2c7-6f1d-2b3b-5cec-000006e59441","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.207.216.197:1031/sshd","pattern":"[url:value = 'http://109.207.216.197:1031/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c19ef30a-a09e-7d3c-87c7-0000d1c7cc84","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://data.yhydl.com:20006/file/XW_Setup.exe","pattern":"[url:value = 'http://data.yhydl.com:20006/file/XW_Setup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbc24820-0cec-0417-707f-000081f16504","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://119.192.128.163:28080/docs/x.rar","pattern":"[url:value = 'http://119.192.128.163:28080/docs/x.rar']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5f86c17-7a9b-c098-8b96-00009731ae0b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://119.192.128.163:28080/docs/solr.sh","pattern":"[url:value = 'http://119.192.128.163:28080/docs/solr.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18041886-38c2-bfbb-612e-000094b87ec4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.152.219.150:8182/tftp","pattern":"[url:value = 'http://185.152.219.150:8182/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab940d12-7355-cdba-84c7-0000a9181b0b","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://103.247.218.186:49052/i","pattern":"[url:value = 'http://103.247.218.186:49052/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80f65b6c-1803-a0a5-1e6a-0000b82aa4dc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://154.73.64.24:41934/i","pattern":"[url:value = 'http://154.73.64.24:41934/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa716c34-8895-c71b-1d2c-0000395e6d19","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://181.171.188.254:17418/i","pattern":"[url:value = 'http://181.171.188.254:17418/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44895c92-487d-6f9c-8761-0000888b00a8","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://43.255.216.26:25260/i","pattern":"[url:value = 'http://43.255.216.26:25260/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01aea97b-b869-51d3-abbc-0000e2794b51","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://159.250.122.151:8081/Photo.scr","pattern":"[url:value = 'http://159.250.122.151:8081/Photo.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08dc7012-eca8-2cfa-70e3-00004b8ed5b1","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://103.163.119.220/Aqua.ppc","pattern":"[url:value = 'http://103.163.119.220/Aqua.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02a24f8c-3329-2042-299c-000053603646","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://103.163.119.220/Aqua.arm5","pattern":"[url:value = 'http://103.163.119.220/Aqua.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88b5c019-283f-2563-14ce-000097704d94","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://ojang.pe.kr/CALENDAR/DOWN/CALENDAR/SETUP.EXE","pattern":"[url:value = 'http://ojang.pe.kr/CALENDAR/DOWN/CALENDAR/SETUP.EXE']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7f22b35-f039-f99e-6d52-0000f3150c7b","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://103.163.119.220/Aqua.x86_64","pattern":"[url:value = 'http://103.163.119.220/Aqua.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c6acf74-c560-bd12-2f80-0000468bc689","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://103.163.119.220/Aqua.dbg","pattern":"[url:value = 'http://103.163.119.220/Aqua.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aac71dec-1f1a-b6ce-f1be-0000aee257cf","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://212.85.166.12:22448/.i","pattern":"[url:value = 'http://212.85.166.12:22448/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99304d82-557b-5c40-37ff-000075c98b3d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://93.87.31.84:40955/.i","pattern":"[url:value = 'http://93.87.31.84:40955/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7688ded-a7dc-f46f-f40f-0000980809e6","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://89.216.107.99:65414/.i","pattern":"[url:value = 'http://89.216.107.99:65414/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--031524f2-3627-8898-4d1a-0000de03e75e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://216.155.92.203:3956/.i","pattern":"[url:value = 'http://216.155.92.203:3956/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c48c3ea9-4fb6-d24f-d815-00008714f7f3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://47.49.114.179:27254/.i","pattern":"[url:value = 'http://47.49.114.179:27254/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e9d45b6-9670-d19f-b2a8-0000361593cb","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://186.138.107.5:14491/.i","pattern":"[url:value = 'http://186.138.107.5:14491/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67f8dbb6-bc48-2112-6819-0000e40fa191","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/bins/hax.mpsl","pattern":"[url:value = 'http://74.48.34.10/bins/hax.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71553755-a511-3ece-359a-00001507accb","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/bins/hax.arm6","pattern":"[url:value = 'http://74.48.34.10/bins/hax.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e85c66ef-afbf-112c-cda9-000007b20325","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/bins/hax.arm5","pattern":"[url:value = 'http://74.48.34.10/bins/hax.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d22a1d7f-fa65-5aaf-076e-00008f0ccfdb","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/bins/hax.mips","pattern":"[url:value = 'http://74.48.34.10/bins/hax.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--065207c3-593c-6522-2358-0000adbbcbae","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/bins/hax.arm7","pattern":"[url:value = 'http://74.48.34.10/bins/hax.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7add5d8-b2e7-0d54-a694-000023c4cffe","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/AB4g5/Josho.mips","pattern":"[url:value = 'http://74.48.34.10/AB4g5/Josho.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c471893-ad68-8ad1-b3ed-000061800f01","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/AB4g5/Josho.arm","pattern":"[url:value = 'http://74.48.34.10/AB4g5/Josho.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a42d9e51-262a-57bd-90a7-00003315fa6c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/AB4g5/Josho.ppc","pattern":"[url:value = 'http://74.48.34.10/AB4g5/Josho.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03d5cf64-531c-25e0-9eeb-00000173cb8b","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/AB4g5/Josho.arm7","pattern":"[url:value = 'http://74.48.34.10/AB4g5/Josho.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eddbae48-4acc-f8ff-6343-0000ab7a0300","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/AB4g5/Josho.arm5","pattern":"[url:value = 'http://74.48.34.10/AB4g5/Josho.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--899faf9f-7fb7-30e4-7664-00004b169419","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/AB4g5/Josho.x86","pattern":"[url:value = 'http://74.48.34.10/AB4g5/Josho.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b65ae12-8b99-02cd-97ae-0000e688365b","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: https://drive.google.com/uc?id=1YDCOOw9TkyO5_QFbdZcaqKD9hZDoUg7O","pattern":"[url:value = 'https://drive.google.com/uc?id=1YDCOOw9TkyO5_QFbdZcaqKD9hZDoUg7O']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd9a8b54-1743-49a3-d161-0000576ef8c5","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://212.73.75.82:33920/i","pattern":"[url:value = 'http://212.73.75.82:33920/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dece9c7f-09e2-ca36-86c2-00000af340bc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://93.87.31.84:40955/i","pattern":"[url:value = 'http://93.87.31.84:40955/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9e88b94-1bc8-7753-b39e-000078ca7ea1","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://195.34.102.234:8051/sshd","pattern":"[url:value = 'http://195.34.102.234:8051/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7cdde8e-a97b-723f-21ff-0000e5b3256f","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://2.54.88.189:802/sshd","pattern":"[url:value = 'http://2.54.88.189:802/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8009109-fcea-d39c-7118-000093fdc5a2","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://195.34.102.234:8061/sshd","pattern":"[url:value = 'http://195.34.102.234:8061/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4edbb2c-2eb9-8e53-d997-00001cab1368","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://195.34.102.234:8056/sshd","pattern":"[url:value = 'http://195.34.102.234:8056/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--135c42ac-ac1f-ac39-7b15-00008486d1e1","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://195.34.102.234:8060/sshd","pattern":"[url:value = 'http://195.34.102.234:8060/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b69ae403-916d-370b-7e86-0000dcf8b7f3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30460/sshd","pattern":"[url:value = 'http://117.240.155.245:30460/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40d294ea-074e-6b56-631b-00002df3ec7e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30490/sshd","pattern":"[url:value = 'http://117.240.155.245:30490/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42d5c010-f077-aefc-b563-0000d5131789","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30420/sshd","pattern":"[url:value = 'http://117.240.155.245:30420/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00b2779d-d8aa-c35c-698c-000044ac539c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.247.101.63:2000/sshd","pattern":"[url:value = 'http://117.247.101.63:2000/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--733dda8d-4c5a-5d56-b36e-00003e24ac8a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30410/sshd","pattern":"[url:value = 'http://117.240.155.245:30410/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6a59f5e-7df6-662e-bea8-0000c2318740","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30480/sshd","pattern":"[url:value = 'http://117.240.155.245:30480/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec609647-ab34-643b-e699-0000eb0a92c3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30380/sshd","pattern":"[url:value = 'http://117.240.155.245:30380/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79f8d394-ddbe-9235-f6ba-0000171fb909","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30310/sshd","pattern":"[url:value = 'http://117.240.155.245:30310/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--411df719-8460-33b6-fc85-0000df7ac6b3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30250/sshd","pattern":"[url:value = 'http://117.240.155.245:30250/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a35ce74-e3e8-20df-c6fb-0000a444bbcb","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30120/sshd","pattern":"[url:value = 'http://117.240.155.245:30120/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4a2cba4-9246-1333-1a5b-00003ad17cb7","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30430/sshd","pattern":"[url:value = 'http://117.240.155.245:30430/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee67c2bd-d1b4-d7b9-593f-000013ea6934","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30330/sshd","pattern":"[url:value = 'http://117.240.155.245:30330/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69e5fb4e-e5b4-eb91-36f5-0000a95acb8c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30140/sshd","pattern":"[url:value = 'http://117.240.155.245:30140/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c440df58-10cb-f6e3-edb4-0000e6a5a222","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://111.74.21.155:5011/sshd","pattern":"[url:value = 'http://111.74.21.155:5011/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0aa6b585-36f6-6853-40a4-0000b58fc0ef","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://47.49.114.179:27254/i","pattern":"[url:value = 'http://47.49.114.179:27254/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06cf6e58-8231-987c-4959-0000667ca3a8","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://182.93.83.124:11028/i","pattern":"[url:value = 'http://182.93.83.124:11028/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--828da79d-9d02-bfcf-b65a-000073f2bb3c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://89.216.107.99:65414/i","pattern":"[url:value = 'http://89.216.107.99:65414/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c902843d-8efc-f863-b0e3-000069240fc7","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://94.244.113.217:53408/i","pattern":"[url:value = 'http://94.244.113.217:53408/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05c3b92c-2f5a-861c-11d3-0000f24b7cd4","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://14.0.204.188/sshd","pattern":"[url:value = 'http://14.0.204.188/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40abc838-5ebe-072d-5b3c-00009c29d6e0","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://94.142.63.8:24860/i","pattern":"[url:value = 'http://94.142.63.8:24860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22481751-a237-ea04-0381-0000e48c4c3f","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://34.45.47.180:8082/file-64bit.elf","pattern":"[url:value = 'http://34.45.47.180:8082/file-64bit.elf']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46ec8f00-c013-6269-c284-0000e1d16f3f","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://34.45.47.180:8082/file-arm.elf","pattern":"[url:value = 'http://34.45.47.180:8082/file-arm.elf']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91d7c314-302f-a3c4-3c0f-000017398d69","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://62.56.225.99:1192/sshd","pattern":"[url:value = 'http://62.56.225.99:1192/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a8b10b1-8102-90cf-3f68-00000042992a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://62.56.225.99:1193/sshd","pattern":"[url:value = 'http://62.56.225.99:1193/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e5388d9-af2a-6e5a-f854-000077165962","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: https://107.180.89.159/wp-content/uploads/wpr-addons/forms/code1.png","pattern":"[url:value = 'https://107.180.89.159/wp-content/uploads/wpr-addons/forms/code1.png']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c2f9244-dc00-99d4-b447-00006b43b55f","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://185.20.19.72:8009/sshd","pattern":"[url:value = 'http://185.20.19.72:8009/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--561d0cf8-383d-2a15-ee80-000080124445","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.215.129.223/sshd","pattern":"[url:value = 'http://117.215.129.223/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91ff8213-2658-88d5-1043-0000cea14d52","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://92.66.30.68:9011/sshd","pattern":"[url:value = 'http://92.66.30.68:9011/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c13213a0-ccd6-1865-b1bc-00008436081d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://92.66.30.68:9014/sshd","pattern":"[url:value = 'http://92.66.30.68:9014/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a6ec005-47ba-bd4a-ba66-0000934d1c5e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://92.66.30.68:9015/sshd","pattern":"[url:value = 'http://92.66.30.68:9015/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--913cc96c-79e9-5ffa-700c-000080ec67fb","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://182.109.0.22:28888/sshd","pattern":"[url:value = 'http://182.109.0.22:28888/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d4cb1d9-40f8-7118-14ef-0000f49ad91e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://80.11.36.4:10014/sshd","pattern":"[url:value = 'http://80.11.36.4:10014/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aab53d6a-313c-40c4-fc0d-000060d5044f","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://222.165.237.58:37379/i","pattern":"[url:value = 'http://222.165.237.58:37379/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44145afe-a2b3-f752-19d3-000011a27a93","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://216.155.92.203:3956/i","pattern":"[url:value = 'http://216.155.92.203:3956/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdce2929-6a05-db81-ff0e-0000fb704820","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://222.165.237.59:37379/i","pattern":"[url:value = 'http://222.165.237.59:37379/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa5a2471-9939-d256-2f11-0000db131e7f","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://222.165.237.60:37379/i","pattern":"[url:value = 'http://222.165.237.60:37379/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4ac0cf7-08e8-fa85-600a-0000372880e0","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://222.165.237.62:37379/i","pattern":"[url:value = 'http://222.165.237.62:37379/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a0b726f-5f2c-7117-13f0-00003d260b35","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://182.109.0.22:18888/sshd","pattern":"[url:value = 'http://182.109.0.22:18888/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e0eded6-fc40-689d-2c24-00008571c994","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://178.183.70.63:8081/sshd","pattern":"[url:value = 'http://178.183.70.63:8081/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63c67fdd-af46-6434-e867-0000ab87e112","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://178.183.70.63:8083/sshd","pattern":"[url:value = 'http://178.183.70.63:8083/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b59f9cc0-df46-d347-e59a-0000d89d9898","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://178.183.70.63:8085/sshd","pattern":"[url:value = 'http://178.183.70.63:8085/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23067311-e330-5bc3-9605-000004e303ca","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://46.175.139.20:11074/i","pattern":"[url:value = 'http://46.175.139.20:11074/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3068efac-9cc2-2038-c42e-0000be9be7d3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://103.159.221.33:9269/i","pattern":"[url:value = 'http://103.159.221.33:9269/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38313782-0446-cacc-319a-0000d71e2a76","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://114.31.8.22:65481/i","pattern":"[url:value = 'http://114.31.8.22:65481/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5c8644b-b8d3-9d2a-30d7-00001c97c34b","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: https://twitch.tj/","pattern":"[url:value = 'https://twitch.tj/']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a8e71a2-549e-3e58-d203-000012ae2a0a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://80.11.36.4:10018/sshd","pattern":"[url:value = 'http://80.11.36.4:10018/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2682e06-e7d6-8265-4b6d-0000b895d9e8","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://198.166.72.242/armv7l","pattern":"[url:value = 'http://198.166.72.242/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2157227c-16f2-568e-f17e-0000fb2056cc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://198.166.72.242/arm7","pattern":"[url:value = 'http://198.166.72.242/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3de6ddbb-9f5f-3bf8-9dce-00004082a87d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://198.166.72.242/aarch64","pattern":"[url:value = 'http://198.166.72.242/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--389ba5d5-0473-3a64-3db8-0000cb99b02d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://47.89.173.214:8888/libmod_hellocpp_42.so","pattern":"[url:value = 'http://47.89.173.214:8888/libmod_hellocpp_42.so']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b209fd3f-893c-43bb-dd9a-0000038fc0e5","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://47.89.173.214:8888/asdf","pattern":"[url:value = 'http://47.89.173.214:8888/asdf']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0705c69f-2762-5948-3896-0000eff33e23","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://47.89.173.214:8888/ffff","pattern":"[url:value = 'http://47.89.173.214:8888/ffff']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f356af5-1426-a320-e13f-00008ed8b314","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://47.89.173.214:8888/xxxx","pattern":"[url:value = 'http://47.89.173.214:8888/xxxx']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58b3a50b-e902-6148-bb9f-0000793b008d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.mips64","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--048b71b7-58ee-9ddf-0489-00007829bf20","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.mipsle","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.mipsle']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e348a7cf-4c6e-dc23-4ae6-0000f7c477bc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.arm7","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b9d7885-e2c8-e595-d389-00007ad080e9","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.arm8x64_be","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.arm8x64_be']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16ea98aa-d91c-3ca5-3c1f-0000d9de967a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://93.87.42.154:40955/i","pattern":"[url:value = 'http://93.87.42.154:40955/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f001759c-a443-9518-f113-00002530b9ef","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.mips64le","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.mips64le']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f83b5657-fbb5-38d6-4319-0000c06f6e95","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://95.62.202.150:10071/sshd","pattern":"[url:value = 'http://95.62.202.150:10071/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f72e4b0-ca94-2968-ca7c-0000b5319d29","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://36.89.62.19:63814/i","pattern":"[url:value = 'http://36.89.62.19:63814/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57b182f2-a4b9-2fa7-3086-0000f7e59b94","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://112.4.110.28:37780/sshd","pattern":"[url:value = 'http://112.4.110.28:37780/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50f2f7c9-b70a-c065-9215-000062460c7b","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.mips64len32","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.mips64len32']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7cf0fbd-fa86-a60a-75d9-0000b5b3ebb4","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.aarch64be","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.aarch64be']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb2e57f4-40be-9fe1-3ea8-00006f975845","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.powerpc64e6500","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.powerpc64e6500']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11ecf2fa-5261-1106-613e-0000c3139ed5","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.armv4","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.armv4']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffe293d6-3f35-63f6-e428-0000691a565e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.armv6","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.armv6']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39bc06a4-21c7-03d1-43f3-0000be8ae80a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.sparc","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38135356-fbbb-502e-2464-0000896f58dd","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/dl1001","pattern":"[url:value = 'http://31.170.22.205/dl1001']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3102fccb-e7cf-dca1-3833-00003f8bf3a3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.aarch64","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca79925b-6bdd-0fd4-09f9-0000fe31a535","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.sparc64","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.sparc64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1d02598-8b6f-eba8-c2ab-00006956ae24","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.powerpc64lepower8","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.powerpc64lepower8']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf5620b9-7a77-7960-6d0f-0000297550ed","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.powerpc64power8","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.powerpc64power8']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34ab0e4f-e2fe-a35c-f755-00005037d889","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.riscv32","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.riscv32']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88e5a340-c567-fa85-cdbd-0000d1a6313b","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.armv7","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.armv7']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb60da79-3c0b-0a06-724f-000099335a77","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.arcle750d","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.arcle750d']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1a433bb-b72b-22eb-66d1-000018ad567f","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.i686","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e55e807a-15ae-dc95-a470-00001a404c75","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.powerpce500mc","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.powerpce500mc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cf94eab-b93c-50e3-adc9-00008bc0df10","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.mips64n32","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.mips64n32']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b19f5dd-b7e6-96bd-55de-00007c875e6e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/dl18","pattern":"[url:value = 'http://31.170.22.205/dl18']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf0bb4fb-edc3-e1ca-2cfd-00005a9c6b14","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/mips","pattern":"[url:value = 'http://160.187.146.122/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f327802d-87a3-bb06-d402-00005a6abdce","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/m68k","pattern":"[url:value = 'http://160.187.146.122/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddb9fbda-faa8-99ae-7d25-0000319dc6cb","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/spc","pattern":"[url:value = 'http://160.187.146.122/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c749ed1-5d94-b3dd-7238-0000c0970804","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/arm6","pattern":"[url:value = 'http://160.187.146.122/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f24d744d-e5d4-81ad-0c89-0000cf0ada10","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/x86","pattern":"[url:value = 'http://160.187.146.122/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfff4583-cbdd-49bc-beec-0000b709b465","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/ppc","pattern":"[url:value = 'http://160.187.146.122/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ad97232-005d-eb33-736f-0000319f055e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/mpsl","pattern":"[url:value = 'http://160.187.146.122/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--857dcf6b-c21b-4d10-a259-0000d222a7ea","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/arm5","pattern":"[url:value = 'http://160.187.146.122/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beef2e2c-4528-720f-e811-0000fe930c51","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/dl20","pattern":"[url:value = 'http://31.170.22.205/dl20']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b49c2a2-900e-0fd0-b920-0000d84680d3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/c.sh","pattern":"[url:value = 'http://160.187.146.122/c.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5432026a-834c-5ab9-963d-00004bd7380e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/w.sh","pattern":"[url:value = 'http://160.187.146.122/w.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7ecdf4f-8375-bffd-ce91-000020acf817","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://36.64.14.250:38834/i","pattern":"[url:value = 'http://36.64.14.250:38834/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8100335d-862a-73c8-bd13-000064799dfc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://82.102.74.238:36868/i","pattern":"[url:value = 'http://82.102.74.238:36868/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a7f6e19-7714-9e34-c3f0-0000dc45f7bf","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://178.210.214.48:9814/i","pattern":"[url:value = 'http://178.210.214.48:9814/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84aa55ad-db5a-d0da-5385-0000d41968fe","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://185.43.17.123:8083/sshd","pattern":"[url:value = 'http://185.43.17.123:8083/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0c1b7d9-84dd-a74f-8680-000031c981b8","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://179.60.216.19:65020/i","pattern":"[url:value = 'http://179.60.216.19:65020/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fff2597-f658-61d3-4563-0000c9dbd4ee","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://181.60.246.15:16794/i","pattern":"[url:value = 'http://181.60.246.15:16794/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e674ff66-6479-d410-8b7e-00007c60ba8d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://2.57.122.121/mig","pattern":"[url:value = 'http://2.57.122.121/mig']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42d8058e-1884-372f-62c4-0000eaa2ddc5","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://162.215.218.82/ns3.jpg","pattern":"[url:value = 'http://162.215.218.82/ns3.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2792de92-16c9-cd25-2423-00000b5b33ee","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://43.229.20.42:2874/i","pattern":"[url:value = 'http://43.229.20.42:2874/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8874502-181c-81b7-4a02-000009203ccb","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://182.160.116.52:57196/i","pattern":"[url:value = 'http://182.160.116.52:57196/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc2bddb2-d99a-1d55-1c3d-0000aa862d0e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://93.182.77.20:86/tftp","pattern":"[url:value = 'http://93.182.77.20:86/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab1886ff-91ac-2165-9a6e-0000345bd673","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://2.136.63.232:92/tftp","pattern":"[url:value = 'http://2.136.63.232:92/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50aaf8d7-44c3-db1f-d1e8-000096d64708","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://61.244.254.110:37903/tftp","pattern":"[url:value = 'http://61.244.254.110:37903/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a46d839-15ee-d046-d591-000009923019","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://179.63.168.2:8082/tftp","pattern":"[url:value = 'http://179.63.168.2:8082/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3db72d22-3f57-bda2-1b23-0000ba90abdd","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://77.226.241.197:5003/tftp","pattern":"[url:value = 'http://77.226.241.197:5003/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21b2125e-bad8-75db-015b-0000cfcfe446","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://188.243.36.33:8082/sshd","pattern":"[url:value = 'http://188.243.36.33:8082/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a807d3e3-3437-3a63-2711-00006ba32880","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://162.215.218.82/oto","pattern":"[url:value = 'http://162.215.218.82/oto']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee1cf29d-7cdc-737a-7272-00003336b193","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://213.47.243.57:48784/i","pattern":"[url:value = 'http://213.47.243.57:48784/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--613fa6b1-2d84-8924-761a-00007ed1e7ba","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://139.162.53.175:685/Mozi.m","pattern":"[url:value = 'http://139.162.53.175:685/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef77204a-592a-ef97-8d87-0000d29e8d6a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://80.110.37.104:48784/i","pattern":"[url:value = 'http://80.110.37.104:48784/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79f63296-01b3-b1f3-0789-0000b44682cd","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/debug.dbg","pattern":"[url:value = 'http://160.187.146.122/debug.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ab0d13a-b2cc-a70e-07fd-00008ec862a0","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://37.252.69.10:58829/i","pattern":"[url:value = 'http://37.252.69.10:58829/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--943584c7-5f28-d8fd-fdfd-000069ca5c93","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://85.57.30.25:7580/sshd","pattern":"[url:value = 'http://85.57.30.25:7580/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eef77aa0-be1b-84c7-e8a8-0000db07eee3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://78.36.11.185:1080/sshd","pattern":"[url:value = 'http://78.36.11.185:1080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c505a4b-163f-803b-b158-0000a386c3f9","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://114.31.8.25:65481/i","pattern":"[url:value = 'http://114.31.8.25:65481/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--574af2ee-6e9c-b823-cff8-0000e78993e2","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://115.127.68.162:55090/i","pattern":"[url:value = 'http://115.127.68.162:55090/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83465252-2438-7343-6de9-00008c7c6480","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://202.40.178.201:26818/i","pattern":"[url:value = 'http://202.40.178.201:26818/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3d2efa6-7a24-386f-0dec-000098b83844","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://202.40.178.226:26818/i","pattern":"[url:value = 'http://202.40.178.226:26818/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efb23183-ee6c-8d3c-e037-0000f437358a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/botx.sh4","pattern":"[url:value = 'http://160.187.146.122/where/botx.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--528a5516-4030-ea02-7c11-0000267c5911","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/botx.arm","pattern":"[url:value = 'http://160.187.146.122/where/botx.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff93a9f3-ed4e-641c-0332-000055374d86","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/botx.mpsl","pattern":"[url:value = 'http://160.187.146.122/where/botx.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--066d5bec-13c8-ede2-b12f-00003ec2f516","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/botx.m68k","pattern":"[url:value = 'http://160.187.146.122/where/botx.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a416f3a-fbd7-c3b9-1e2a-00003e3423cc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/botx.mips","pattern":"[url:value = 'http://160.187.146.122/where/botx.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--703714aa-1a63-4835-cb83-0000b68aef32","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/botx.arm5","pattern":"[url:value = 'http://160.187.146.122/where/botx.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6a8e9df-b858-bb59-133a-00002512547a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/wget.sh","pattern":"[url:value = 'http://160.187.146.122/where/wget.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc7df99e-3381-50b2-a1a9-0000e83187ed","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://81.22.42.232:8201/sshd","pattern":"[url:value = 'http://81.22.42.232:8201/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65b0132f-21d1-b051-0a20-00006de9b608","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://121.202.208.107/sshd","pattern":"[url:value = 'http://121.202.208.107/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19e548ee-a059-684f-f51b-0000bfca6be7","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://201.94.181.7:8013/sshd","pattern":"[url:value = 'http://201.94.181.7:8013/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4928d95d-119e-274d-e4e1-0000f55d2ea8","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://201.94.181.7:8016/sshd","pattern":"[url:value = 'http://201.94.181.7:8016/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04e07856-4586-97cd-b3e3-0000dbab062e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://201.94.181.7:8014/sshd","pattern":"[url:value = 'http://201.94.181.7:8014/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35d3a43d-e385-69de-107c-00000d74c9db","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://121.202.209.31/sshd","pattern":"[url:value = 'http://121.202.209.31/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dad70e51-e3f9-0f01-9a9c-00001f3c6b0a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://121.202.208.237/sshd","pattern":"[url:value = 'http://121.202.208.237/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ae98b30-650a-252b-a96d-0000d1bcbb28","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://81.22.42.232:8202/sshd","pattern":"[url:value = 'http://81.22.42.232:8202/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba0c0c97-9c50-1c99-2709-0000a929e846","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/sora.m68k","pattern":"[url:value = 'http://160.187.146.122/bins/sora.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43f2fe88-cf20-c1d3-dfda-0000c2dc50d6","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/sora.mpsl","pattern":"[url:value = 'http://160.187.146.122/bins/sora.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6203841-6856-fc6a-cc16-0000a9df3e9c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/sora.mips","pattern":"[url:value = 'http://160.187.146.122/bins/sora.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d34b265-65be-3678-d694-00004d2d7477","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/sora.ppc","pattern":"[url:value = 'http://160.187.146.122/bins/sora.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--555e34a7-b478-0f12-9b2f-00001fb8811a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/sora.arm","pattern":"[url:value = 'http://160.187.146.122/bins/sora.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--555f126b-f606-8abc-a59b-000033d45d8c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/sora.arm6","pattern":"[url:value = 'http://160.187.146.122/bins/sora.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c57b20d-c8bf-06e4-6e28-0000df52debc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/w.sh","pattern":"[url:value = 'http://160.187.146.122/bins/w.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f32c72c5-5867-6980-a8ae-00004cc36661","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/c.sh","pattern":"[url:value = 'http://160.187.146.122/bins/c.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--410b8fec-746a-e7e1-ef03-00007f473127","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/mpsl","pattern":"[url:value = 'http://160.187.146.122/where/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c843ef1-c792-6b89-9b2c-0000eb600071","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/sh4","pattern":"[url:value = 'http://160.187.146.122/where/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4d94925-ade5-7153-5f83-000014445f6d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/mips","pattern":"[url:value = 'http://160.187.146.122/where/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09d6dca6-7828-a7d0-5789-00006bbe9987","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/ppc","pattern":"[url:value = 'http://160.187.146.122/where/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2464ed68-9965-53ba-2a53-000013bdf7f2","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/x86","pattern":"[url:value = 'http://160.187.146.122/where/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceaf32b5-c5fc-3303-df52-00009cfa9393","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/arm5","pattern":"[url:value = 'http://160.187.146.122/where/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8f57df3-b1fe-5f43-004e-000014b289b7","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/m68k","pattern":"[url:value = 'http://160.187.146.122/where/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--702d9a17-114d-265b-00a9-0000236ecece","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.x86_64","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43a0f26e-e3ac-0c2f-b25b-000046638310","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/vcimanagement.sh4","pattern":"[url:value = 'http://160.187.146.122/bins/vcimanagement.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d87ad7ea-9f5e-7c1c-5830-00002eaadbfa","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/vcimanagement.m68k","pattern":"[url:value = 'http://160.187.146.122/bins/vcimanagement.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36f21039-fd8d-7458-5294-0000c6bd1ae6","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/vcimanagement.ppc","pattern":"[url:value = 'http://160.187.146.122/bins/vcimanagement.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34b4ae60-a04b-37e5-4817-000040296848","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/vcimanagement.spc","pattern":"[url:value = 'http://160.187.146.122/bins/vcimanagement.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7c26703-2c41-3a48-e6a1-0000a9e6a5dc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/x86_64","pattern":"[url:value = 'http://160.187.146.122/where/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20a15399-88f1-877d-3d7a-000036f35b18","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/arm7","pattern":"[url:value = 'http://160.187.146.122/where/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae2098ac-b8b5-018e-d3f8-0000a6e2c1de","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/vcimanagement.arm5","pattern":"[url:value = 'http://160.187.146.122/bins/vcimanagement.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ac1e462-7963-a600-c38e-000069549e54","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/vcimanagement.x86_64","pattern":"[url:value = 'http://160.187.146.122/bins/vcimanagement.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f38e5141-b2d2-6814-3390-00002c8e6098","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.arm7","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--218425f5-badb-8470-89c8-0000455f636a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/vcimanagement.mpsl","pattern":"[url:value = 'http://160.187.146.122/bins/vcimanagement.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92248d34-64c9-ec3d-08a1-0000653a0aa7","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.mpsl","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2664198-729c-c089-ad88-00004ac5163d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.spc","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--848961d7-5459-2d9e-444e-0000943207fd","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.arm6","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d80306d-6b5c-d3d5-0c69-00008687a813","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.arm5","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bda7f2b-42fb-c17f-d092-00000ecfb237","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.m68k","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd92ce0f-f5a0-4046-70dd-0000b4520ae6","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.x86","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--384a7903-9de4-5b43-7c8c-00009ec491fe","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.arm","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6ca4c4f-c953-7237-a960-0000a8cda452","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://77.50.222.238:51680/i","pattern":"[url:value = 'http://77.50.222.238:51680/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--664efe84-208f-4550-58f7-000009115630","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://2.54.239.98:802/sshd","pattern":"[url:value = 'http://2.54.239.98:802/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e707999-8c11-6954-ba6b-0000a84c755c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://85.204.105.97:30802/i","pattern":"[url:value = 'http://85.204.105.97:30802/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90bd54ad-ca79-3c6a-1a2d-00004ed1dc6c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://87.119.108.21:40462/i","pattern":"[url:value = 'http://87.119.108.21:40462/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b735449a-4f74-e8bc-2099-0000c654361d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://183.91.77.253:19833/i","pattern":"[url:value = 'http://183.91.77.253:19833/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6384224e-9e99-1f28-cab3-0000c315e41e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://201.98.176.195:8022/sshd","pattern":"[url:value = 'http://201.98.176.195:8022/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0004dad-e1ff-4cb2-cefc-00006001ba35","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://2.54.84.143:802/sshd","pattern":"[url:value = 'http://2.54.84.143:802/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bb914ea-8ffa-7207-e134-0000cc10ccce","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://121.202.208.193/sshd","pattern":"[url:value = 'http://121.202.208.193/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d2e7183-ebcc-4435-a4ac-0000fdf7a502","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://14-0-204-188.static.pccw-hkt.com/sshd","pattern":"[url:value = 'http://14-0-204-188.static.pccw-hkt.com/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--450906ac-0b8f-b035-6f58-00000b92fecd","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://223.83.211.82:8000/sshd","pattern":"[url:value = 'http://223.83.211.82:8000/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10808ec3-1c6e-9693-3ed9-00002f275b42","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://195.26.97.59/sshd","pattern":"[url:value = 'http://195.26.97.59/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3938239b-be62-c605-52b0-0000939bdd79","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://202.88.234.44:64615/i","pattern":"[url:value = 'http://202.88.234.44:64615/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf40096a-a63c-5f22-80a5-00001628f13e","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://93.116.56.78:3976/i","pattern":"[url:value = 'http://93.116.56.78:3976/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5ef2705-155a-b024-6da5-000018cdca0c","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://31.28.31.6:50871/i","pattern":"[url:value = 'http://31.28.31.6:50871/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17b04175-ffe9-5ef0-649a-0000844f22ca","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://191.33.171.242:55443/i","pattern":"[url:value = 'http://191.33.171.242:55443/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c279b0d-0ef5-08b6-5d76-0000cb11303b","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/pub/info.zip","pattern":"[url:value = 'http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/pub/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ff13f38-b556-31d8-bd73-00004c6a193f","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/pub/dto/info.zip","pattern":"[url:value = 'http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/pub/dto/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7899769-33ba-ed5d-a491-0000191492bf","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://116.171.106.3:3435/tomcat8/webapps/info.zip","pattern":"[url:value = 'http://116.171.106.3:3435/tomcat8/webapps/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc85eccc-a3e8-7812-a79e-000003dae119","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/mapping/info.zip","pattern":"[url:value = 'http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/mapping/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28665217-1fa9-70b9-a814-0000c1430bc8","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/wss/info.zip","pattern":"[url:value = 'http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/wss/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b01688e-9185-520d-d0e9-0000c5fea246","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://116.171.106.3:3435/tomcat8/webapps/bfxt_pda/WEB-INF/classes/com/vkl/pcwss/module/info.zip","pattern":"[url:value = 'http://116.171.106.3:3435/tomcat8/webapps/bfxt_pda/WEB-INF/classes/com/vkl/pcwss/module/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac15f6ae-54f3-5658-62a3-000008ab97b8","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/cksy/servacpt/service/impl/info.zip","pattern":"[url:value = 'http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/cksy/servacpt/service/impl/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b37a6c9-b44d-bdc4-98b9-00002ae8561a","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://47.96.106.127:8890/02.08.2022.exe","pattern":"[url:value = 'http://47.96.106.127:8890/02.08.2022.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ef6e4a4-6c4c-45df-24d3-000044cbd1fd","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://90.8.83.87:83/sshd","pattern":"[url:value = 'http://90.8.83.87:83/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--976e93b9-31b6-a1b0-e2ff-0000ce9f1520","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://90.8.83.87/sshd","pattern":"[url:value = 'http://90.8.83.87/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--589f8459-dc25-61b6-96c5-0000a8448353","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://85.57.30.25:7480/sshd","pattern":"[url:value = 'http://85.57.30.25:7480/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--633e45af-a421-c230-5571-00006a3df97b","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://90.8.83.87:81/sshd","pattern":"[url:value = 'http://90.8.83.87:81/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52b882f4-f59e-f9f2-4f99-00008ab45f87","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://121.202.142.68/sshd","pattern":"[url:value = 'http://121.202.142.68/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fabc1d44-3be5-6936-2dae-0000be5ef3f3","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://121.202.153.132/sshd","pattern":"[url:value = 'http://121.202.153.132/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe92ed87-3868-e140-5b60-0000e5dd379c","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://61.2.45.141:2000/sshd","pattern":"[url:value = 'http://61.2.45.141:2000/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10ee5976-eea8-3d32-3bc2-000088c1783e","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://61.2.45.172:2000/sshd","pattern":"[url:value = 'http://61.2.45.172:2000/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51175c9f-8848-43aa-9ab7-000097e42dad","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://177.247.2.226:48894/i","pattern":"[url:value = 'http://177.247.2.226:48894/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52beabcd-6e16-4bd3-73a2-00000c2bbb46","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://45.236.116.198:23704/i","pattern":"[url:value = 'http://45.236.116.198:23704/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26364721-81dd-b2ff-3090-0000bd7b2504","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://24.37.71.230:54401/i","pattern":"[url:value = 'http://24.37.71.230:54401/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04f72898-15c0-a91e-c8ac-000079f265f7","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://88.24.52.121:10062/sshd","pattern":"[url:value = 'http://88.24.52.121:10062/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b47b19f7-3b65-45fb-087e-0000182a21e3","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://91.147.91.21:23459/i","pattern":"[url:value = 'http://91.147.91.21:23459/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6625d862-d7c9-292b-8b86-0000bdc0c1d6","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://121.202.196.93/sshd","pattern":"[url:value = 'http://121.202.196.93/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e909afa-78e8-b901-286f-0000378442f2","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://130.61.147.74/bot.zip","pattern":"[url:value = 'http://130.61.147.74/bot.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb15f2db-9267-d58d-00f6-00003efdf860","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://34.70.102.215/linpeas.sh","pattern":"[url:value = 'http://34.70.102.215/linpeas.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8d466cd-e299-3781-c3b0-0000df189ae9","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: https://1h.vuregyy1.ru/4pi3llms81.hta","pattern":"[url:value = 'https://1h.vuregyy1.ru/4pi3llms81.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eaf837a-226f-38bf-5d08-0000fbd7ddf7","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://95.43.76.100:43118/.i","pattern":"[url:value = 'http://95.43.76.100:43118/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1b90535-2e6f-5e57-7085-0000191c9d09","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://2.55.126.179:802/sshd","pattern":"[url:value = 'http://2.55.126.179:802/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e0bf015-6dea-af08-3ccc-00006df51c0e","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://103.93.200.20:2260/i","pattern":"[url:value = 'http://103.93.200.20:2260/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bbde383-2a6b-535b-18da-0000d7868f22","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://181.129.100.123:30581/i","pattern":"[url:value = 'http://181.129.100.123:30581/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ee9e4a4-b8ae-cdf3-c0f6-0000c9c3dc18","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://183.81.156.125:12929/i","pattern":"[url:value = 'http://183.81.156.125:12929/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b694493-bee7-ae07-7e3b-0000ab581081","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://45.115.254.91:32515/i","pattern":"[url:value = 'http://45.115.254.91:32515/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e60be9e-8f02-e1d3-bf85-0000340f3254","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://36.154.188.50:37782/sshd","pattern":"[url:value = 'http://36.154.188.50:37782/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23a81f95-90c7-bc8b-7314-00001af91ad2","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://36.154.188.50:37780/sshd","pattern":"[url:value = 'http://36.154.188.50:37780/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c8f0477-7a40-c831-831e-0000bca360d2","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://188.95.148.167:9393/sshd","pattern":"[url:value = 'http://188.95.148.167:9393/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2e708a0-858e-03f2-34e7-0000dbb9e5af","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://178.48.13.117:21861/i","pattern":"[url:value = 'http://178.48.13.117:21861/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4778ec3-3647-67a2-b5cd-00000cfe3c59","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://45.112.126.123:1600/i","pattern":"[url:value = 'http://45.112.126.123:1600/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f57b8ba-a304-a60d-e773-0000e5acde80","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://178.220.234.5:53133/i","pattern":"[url:value = 'http://178.220.234.5:53133/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a750e95f-7141-264e-9108-0000774135d5","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://177.70.102.228:8070/TmpFTP/CT-e/Distribui%C3%A7%C3%A3o/02589791000677/Consulta%20Geral/2025-05-03/info.zip","pattern":"[url:value = 'http://177.70.102.228:8070/TmpFTP/CT-e/Distribui%C3%A7%C3%A3o/02589791000677/Consulta%20Geral/2025-05-03/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f605a9e1-af2a-4318-ae5e-000053f90ce0","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://103.8.164.18/Photo.lnk","pattern":"[url:value = 'http://103.8.164.18/Photo.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83385531-3c00-ca5b-2b46-00003e11db05","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://103.8.164.18/Video.lnk","pattern":"[url:value = 'http://103.8.164.18/Video.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--282d9b86-aa1d-b328-4dc1-0000c6a42d10","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://188.246.178.42:62425/i","pattern":"[url:value = 'http://188.246.178.42:62425/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63752de4-870f-1824-605b-00005ad8e2ed","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.147.155.189/Photo.lnk","pattern":"[url:value = 'http://80.147.155.189/Photo.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1648d134-a3c7-e9d1-4186-000037303508","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.147.155.189/Video.lnk","pattern":"[url:value = 'http://80.147.155.189/Video.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e7a6a7d-3b15-caeb-e43e-0000879da53c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://177.70.102.228:8070/Install/info.zip","pattern":"[url:value = 'http://177.70.102.228:8070/Install/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e53c88cd-f017-ac77-ca4e-0000b1342e9c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://177.70.102.228:8070/RelFTP/info.zip","pattern":"[url:value = 'http://177.70.102.228:8070/RelFTP/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c825e47-09c4-1354-1802-0000a62d4c51","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://177.70.102.228:8070/ExeFTP/info.zip","pattern":"[url:value = 'http://177.70.102.228:8070/ExeFTP/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f53044cf-2b4f-b774-32ea-0000dc492e8b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://177.70.102.228:8070/GdbFTP/info.zip","pattern":"[url:value = 'http://177.70.102.228:8070/GdbFTP/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f2f2b1a-4c2e-c76c-b2d9-00003866a357","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://109.25.123.70:8080/sshd","pattern":"[url:value = 'http://109.25.123.70:8080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a528a2f5-68c6-1235-b8c0-0000eefd82a1","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.234.234.14:16507/i","pattern":"[url:value = 'http://45.234.234.14:16507/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7e5ae0b-5c73-70e7-1ad9-000018c72d28","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://50.43.160.231:38064/i","pattern":"[url:value = 'http://50.43.160.231:38064/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d286872-66f9-9e4e-c280-00003b92b0a8","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://107.173.101.114:10000/swt","pattern":"[url:value = 'http://107.173.101.114:10000/swt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8053aa22-3519-0909-2fee-00006935838d","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://116.90.122.2:36364/i","pattern":"[url:value = 'http://116.90.122.2:36364/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60418e02-590a-a4df-145b-000053295563","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://178.16.54.109/2","pattern":"[url:value = 'http://178.16.54.109/2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac5289c0-fe3d-92c1-c57c-00000afdc098","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://36.64.227.134:63289/i","pattern":"[url:value = 'http://36.64.227.134:63289/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2819ed06-5843-e211-87d5-00007f401c55","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://117.72.242.9:9999/02.08.2022.exe","pattern":"[url:value = 'http://117.72.242.9:9999/02.08.2022.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5df80180-6c2c-e262-3e91-0000bf3e151c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.147.155.189/AV.lnk","pattern":"[url:value = 'http://80.147.155.189/AV.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5ca1f24-c33e-5aab-f9c9-00007dd98e07","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.147.155.189/Photo.scr","pattern":"[url:value = 'http://80.147.155.189/Photo.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0f7e3f4-f855-0ab9-cb4d-0000103159e2","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.147.155.189/Video.scr","pattern":"[url:value = 'http://80.147.155.189/Video.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b473340-5527-5c19-caa1-0000983f79f6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.147.155.189/AV.scr","pattern":"[url:value = 'http://80.147.155.189/AV.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1115c62d-b6d9-cae5-1d48-0000349e042f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://220.77.244.174:8602/info.zip","pattern":"[url:value = 'http://220.77.244.174:8602/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23e72eef-88d2-2986-44da-000063a1ace7","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d8b07df-a1ec-6737-5e94-00004788fb41","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_10124_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_10124_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--445c0f5f-4638-c996-8e95-000076d32d77","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/PRODIMG/ExportImages_42425_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/PRODIMG/ExportImages_42425_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--304ebef7-ef7f-be82-7e29-0000afdfcf6a","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_102124_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_102124_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c676cfea-ef77-5027-e32b-0000a5070f96","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_9425_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_9425_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb706cec-536a-aae2-5caa-0000cdc33916","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_9924_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_9924_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdbcea3e-9a3c-8e45-8703-0000bcc56948","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_101824_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_101824_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3594e545-2a37-3056-107f-0000564c5a44","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_10824_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_10824_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e01e3f4-9ea1-8f87-da21-000044ef0e35","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_91824_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_91824_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--951953c5-eb63-4520-4cd7-000096efb7c7","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_101124_MAHAL-SERVER/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_101124_MAHAL-SERVER/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c59f133-bf53-73e7-660c-0000cd4b2747","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_112724_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_112724_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c52e5aa4-27bd-8603-c502-0000b68508c6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_62124_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_62124_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3305c435-0969-1deb-cbfb-0000092a8423","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_6424_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_6424_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c5a7bce-18a7-7fe4-d3f1-00002832e67f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_21025_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_21025_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab47dd59-2f65-bc60-91b1-00004b353f5b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_31025_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_31025_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f28f311-d8c1-b573-b5b9-0000e3b69652","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_11125_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_11125_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18e0178f-a119-d9ad-39d1-0000bb967fe5","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_61424_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_61424_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22ced049-f173-fc2e-be6f-000076d9d96b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_61924_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_61924_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01568980-8142-598e-ca08-00007d0a89ec","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_102624_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_102624_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0236ca9-1dda-8cea-e0cf-000049f07658","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_11424_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_11424_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4398af10-b62b-52a7-b1a5-00003f1b5dcd","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_10325_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_10325_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06b748df-ab24-b851-95a4-00001f06d487","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_101424_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_101424_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a08c0192-3daf-5bf7-db1a-0000f7f4d7da","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_22225_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_22225_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63c3db1d-2ea7-f398-9e1f-00008029fa30","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_12525_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_12525_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bbbba91-2f25-8204-087f-00004a3ebb14","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_22225_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_22225_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9280769e-9ad6-01d7-7515-000097268d96","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_22025_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_22025_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ef961f9-c92b-54ca-2a2c-0000f6e41db1","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_12424_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_12424_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1750929d-f87f-b9a3-d350-000029a1d776","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_21625_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_21625_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce6b5e92-21c9-43c1-acdb-0000f4b9e1f4","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_21425_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_21425_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--736c47e9-a40f-338b-f36b-0000a9795a43","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://103.208.202.85:9914/i","pattern":"[url:value = 'http://103.208.202.85:9914/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f4b818f-d8d7-bae0-c5b8-0000dd89287e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://39.105.200.188/02.08.2022.exe","pattern":"[url:value = 'http://39.105.200.188/02.08.2022.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7c70381-b588-74c1-4204-00003aac303e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_82224_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_82224_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15bc65cf-8dfc-7c3b-9e7d-0000b4d8f483","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_51125_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_51125_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cc43167-4048-29ec-a68d-0000e3ba991c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_92825_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_92825_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f626dd-0e45-767d-3a88-0000e62737b5","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_82624_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_82624_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a30dab3f-0047-3251-ed0c-0000e803fe3f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://68.110.47.231/av.lnk","pattern":"[url:value = 'http://68.110.47.231/av.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0ef6741-79dd-d038-5d27-00009f27a030","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_82225_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_82225_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab0206c5-5857-3e19-6238-0000db46d704","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_3925_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_3925_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd3ea491-fa44-d4a0-ccfc-000003adf3e2","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://68.110.47.231/photo.lnk","pattern":"[url:value = 'http://68.110.47.231/photo.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8035841-0376-2088-6e20-00006e452407","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://68.110.47.231/video.lnk","pattern":"[url:value = 'http://68.110.47.231/video.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29f820f8-95e2-4e27-5a88-000069433963","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_61324_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_61324_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4583570-ebe3-753d-f3c6-00006706364a","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_42425_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_42425_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96fb2f47-a430-bd5a-7b03-0000b9d0cd84","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_71024_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_71024_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ebc6a81-6d44-c93a-6cb2-0000494448ed","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://68.110.47.231/video.scr","pattern":"[url:value = 'http://68.110.47.231/video.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65b299ff-8452-006e-1842-0000cf0292d5","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://68.110.47.231/av.scr","pattern":"[url:value = 'http://68.110.47.231/av.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b819651-aef0-5069-72dd-000024ac9f08","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://68.110.47.231/photo.scr","pattern":"[url:value = 'http://68.110.47.231/photo.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19b6eacb-ddff-002b-99d6-0000ef1f31c9","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://68.110.47.231/info.zip","pattern":"[url:value = 'http://68.110.47.231/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2526ca12-961d-eadd-f6a0-000008cc88ac","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://103.154.90.21:4747/i","pattern":"[url:value = 'http://103.154.90.21:4747/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8cf137d-489c-0b48-d49e-0000c26b20d6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://88.190.74.159/sshd","pattern":"[url:value = 'http://88.190.74.159/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4144fab-15c7-984a-e97f-00004c60707c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://82.66.224.73:8080/sshd","pattern":"[url:value = 'http://82.66.224.73:8080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69780bcd-deed-43aa-bc3a-0000d02b6011","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://138.219.58.34:28990/i","pattern":"[url:value = 'http://138.219.58.34:28990/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54527f32-63c2-1db9-cfbf-0000fe5b21e5","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://178.219.38.228:23053/i","pattern":"[url:value = 'http://178.219.38.228:23053/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a31ea338-938b-11ad-62a7-0000a12b236c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://86.89.95.77:8999/sshd","pattern":"[url:value = 'http://86.89.95.77:8999/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2504f598-b353-1783-1359-000069d07d22","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_122124_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_122124_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3d14ff0-455f-0aca-022b-0000c7878705","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://93.39.215.44:9111/sshd","pattern":"[url:value = 'http://93.39.215.44:9111/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceba9d76-79d3-3e0f-27b6-00004b51ff47","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://129.0.120.134:9999/i","pattern":"[url:value = 'http://129.0.120.134:9999/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb95120f-31a9-4305-e5d0-000007bb1540","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://107.189.6.236/curl","pattern":"[url:value = 'http://107.189.6.236/curl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac4bc18b-2b5a-1bf2-d4e8-00002af9cf74","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://2.55.81.169:802/sshd","pattern":"[url:value = 'http://2.55.81.169:802/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cfe021c-3322-95c8-24ef-00008979a27f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://85.187.54.142:10032/sshd","pattern":"[url:value = 'http://85.187.54.142:10032/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76f5b049-ec4a-6cc9-ddc6-0000a22f5bbc","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://41.162.188.251:22850/i","pattern":"[url:value = 'http://41.162.188.251:22850/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07812323-e69c-9be9-dd65-0000ea6b79c7","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://66.39.79.68/","pattern":"[url:value = 'http://66.39.79.68/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff9d6525-55e6-761a-7e81-00005cc4b141","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://3.141.75.29/","pattern":"[url:value = 'https://3.141.75.29/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fcbb965-8e1a-0050-c9fd-000083db42b3","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://13.113.8.105/","pattern":"[url:value = 'https://13.113.8.105/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24215dc5-7103-ebf1-728e-0000206e2266","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://18.217.254.255/","pattern":"[url:value = 'https://18.217.254.255/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22b6dc1c-3ee6-1a10-46d6-0000eec58332","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://188.134.8.43:93/sshd","pattern":"[url:value = 'http://188.134.8.43:93/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25368e03-23b8-5108-a688-00009c8adb8e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://94.42.177.12:3389/i","pattern":"[url:value = 'http://94.42.177.12:3389/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0b744ff-0472-96db-9365-00008bfeddad","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://scrroeder.com/1q1q.js","pattern":"[url:value = 'https://scrroeder.com/1q1q.js']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c66d6166-a834-e7a0-dd92-0000f7c9b5f9","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://37.255.210.242:45640/i","pattern":"[url:value = 'http://37.255.210.242:45640/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d2dbb3b-d80d-d23b-d682-00009ea664f4","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://115.127.68.162:55090/","pattern":"[url:value = 'http://115.127.68.162:55090/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f7ef27d-2d6c-b8cf-f331-0000396861f6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://182.160.116.52:57196/","pattern":"[url:value = 'http://182.160.116.52:57196/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37d7dd86-abc4-e72f-9061-00003defde8e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://www.namuvpn.com/install/back/NAMUVPN32.exe","pattern":"[url:value = 'https://www.namuvpn.com/install/back/NAMUVPN32.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3023826f-002f-5e48-ecdb-00001c2f4238","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://www.namuvpn.com/install/back/NAMUVPN7/NAMUVPN7.exe","pattern":"[url:value = 'https://www.namuvpn.com/install/back/NAMUVPN7/NAMUVPN7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d11684f3-e6c7-8ca1-166d-0000e8cf60e8","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://www.namuvpn.com/install/namuxp.zip","pattern":"[url:value = 'https://www.namuvpn.com/install/namuxp.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f61bd262-017e-03de-0660-0000864e3467","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://46.151.56.42:28186/","pattern":"[url:value = 'http://46.151.56.42:28186/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f94937ca-aeb2-4ff8-dbb2-0000f7490fc1","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://www.namuvpn.com/install/namu864.exe","pattern":"[url:value = 'https://www.namuvpn.com/install/namu864.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f7a75cd-9ce0-8bab-4347-00008f995523","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://115.240.70.185:14868/","pattern":"[url:value = 'http://115.240.70.185:14868/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2cdb7dc-39b9-8be5-283d-00003eb40f2a","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://122.170.110.131:9105/cryptography_module/base_library.zip","pattern":"[url:value = 'http://122.170.110.131:9105/cryptography_module/base_library.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83a16802-b4d9-f46e-3415-0000fb07e392","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://185.12.78.161:36220/","pattern":"[url:value = 'http://185.12.78.161:36220/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01cecb3c-4f03-698c-d71a-00008dd5b869","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://94.244.113.217:53408/","pattern":"[url:value = 'http://94.244.113.217:53408/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--582bfe06-475c-ec13-5006-0000d6780c37","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://178.220.234.5:53133/","pattern":"[url:value = 'http://178.220.234.5:53133/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba24c3fa-7fcd-adf0-4b84-000090f1d34e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://81.16.249.96:46703/","pattern":"[url:value = 'http://81.16.249.96:46703/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0e68681-e1da-ca48-55ff-000030314c69","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://202.148.20.138:24291/","pattern":"[url:value = 'http://202.148.20.138:24291/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0008fcce-9388-c2ca-70e8-0000d995d867","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://37.252.69.10:58829/","pattern":"[url:value = 'http://37.252.69.10:58829/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d234c40-9315-d4d5-1312-00007a47b918","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://87.119.108.21:40462/","pattern":"[url:value = 'http://87.119.108.21:40462/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb044475-eb98-aae4-4f02-00003534a1f6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://190.12.99.194:28516/","pattern":"[url:value = 'http://190.12.99.194:28516/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71a343dc-8456-a910-084d-0000e46e671f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://138.219.58.34:28990/","pattern":"[url:value = 'http://138.219.58.34:28990/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ce8ae5c-ac65-fff8-91c2-00000f85691b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://217.75.193.34:9432/","pattern":"[url:value = 'http://217.75.193.34:9432/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43ed4678-4913-565b-dfe0-0000d60c0a43","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://212.107.232.167:21838/","pattern":"[url:value = 'http://212.107.232.167:21838/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f1dfd23-45a7-73ce-444c-00000c694e21","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://216.155.92.203:3956/","pattern":"[url:value = 'http://216.155.92.203:3956/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e0de4e6-1004-4023-5763-00001dbaa387","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://83.218.189.21:5195/","pattern":"[url:value = 'http://83.218.189.21:5195/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e47c66c-2dc3-faf9-17a8-0000c0a3d35f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://103.164.117.74:42924/","pattern":"[url:value = 'http://103.164.117.74:42924/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8418c75e-a43c-c18f-e89e-000005839f4f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://154.0.129.134:10702/","pattern":"[url:value = 'http://154.0.129.134:10702/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbeaeb04-4d4a-b7e1-9242-00000e2acce8","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.140.32.219:12617/","pattern":"[url:value = 'http://78.140.32.219:12617/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57278d8c-d449-d342-ef96-0000377ef470","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://115.178.100.190:4788/","pattern":"[url:value = 'http://115.178.100.190:4788/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c7f01e7-8338-1bc5-7f7b-0000817adeeb","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://202.131.234.26:51118/","pattern":"[url:value = 'http://202.131.234.26:51118/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3136cb6a-b10a-308f-4daf-000056829075","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://82.114.200.50:48416/","pattern":"[url:value = 'http://82.114.200.50:48416/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85768dff-cf1a-4db6-21f5-00007da543c9","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://186.138.107.5:14491/","pattern":"[url:value = 'http://186.138.107.5:14491/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4af68559-98b9-a7da-a8f5-000085316bfc","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://154.84.212.18:20781/","pattern":"[url:value = 'http://154.84.212.18:20781/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--709c94e2-c5b0-5f34-415c-0000b284d161","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://154.0.129.114:10702/02.08.2022.exe","pattern":"[url:value = 'http://154.0.129.114:10702/02.08.2022.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b0f07c1-207b-5935-b4fa-0000bbe532c4","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://62.197.62.195:60001/sshd","pattern":"[url:value = 'http://62.197.62.195:60001/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43055a89-6568-d566-0a2a-00002aac24b3","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://36.95.137.155:1876/i","pattern":"[url:value = 'http://36.95.137.155:1876/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9d63bcf-ae3a-3183-7747-00003d870cf3","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.147.202.53:9635/.i","pattern":"[url:value = 'http://45.147.202.53:9635/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64350af1-91a5-1bf5-5df4-0000ec2c7084","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://102.23.89.5:8083/sshd","pattern":"[url:value = 'http://102.23.89.5:8083/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aee6607e-4cf9-96f6-3a93-0000868d2cb0","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://95.155.243.196:38537/bin.sh","pattern":"[url:value = 'http://95.155.243.196:38537/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b874ce90-431a-07ae-fcf3-00000b74b203","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://95.155.243.196:38537/i","pattern":"[url:value = 'http://95.155.243.196:38537/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--883604e0-4477-0801-2c13-0000f642c51b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.147.202.53:9635/i","pattern":"[url:value = 'http://45.147.202.53:9635/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df7cce0f-8aad-3efc-5b5c-0000f3e0c59b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://213.5.194.56:43416/i","pattern":"[url:value = 'http://213.5.194.56:43416/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e93035d0-50c4-420b-2425-0000fd17826d","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://95.62.202.150:10052/sshd","pattern":"[url:value = 'http://95.62.202.150:10052/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba5d6720-6d7b-c4e7-141a-0000f35dd3dd","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://202.40.178.238:53237/i","pattern":"[url:value = 'http://202.40.178.238:53237/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cac6865-3a5f-6e73-5d0e-0000c82e4275","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://184.185.30.182:29029/.i","pattern":"[url:value = 'http://184.185.30.182:29029/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec4c197f-a364-14f7-e175-00004fb1ce8c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://36.88.6.203:8907/.i","pattern":"[url:value = 'http://36.88.6.203:8907/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5622e337-af6a-08f6-5ea6-000075615726","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://41.162.188.251:22850/.i","pattern":"[url:value = 'http://41.162.188.251:22850/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9348eec-885e-4514-6526-0000d03a2dd3","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://213.5.194.56:43416/.i","pattern":"[url:value = 'http://213.5.194.56:43416/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58307433-a6c0-5afd-a3ec-0000bfd19261","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://196.39.143.113:8080/sshd","pattern":"[url:value = 'http://196.39.143.113:8080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce71d395-4e73-dfa6-c933-000082b9e80d","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://50.43.160.231:38064/.i","pattern":"[url:value = 'http://50.43.160.231:38064/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0abde195-2a34-513e-9926-0000fd1b3223","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://88.135.26.83:32710/.i","pattern":"[url:value = 'http://88.135.26.83:32710/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bce829b5-f4e7-80c2-0141-0000dd748c48","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://138.219.58.34:28990/.i","pattern":"[url:value = 'http://138.219.58.34:28990/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16807076-db30-9494-ccbc-0000668dab8c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.173.12.30:17886/.i","pattern":"[url:value = 'http://45.173.12.30:17886/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--151bc9aa-490e-3e01-7e76-0000b0c438e6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://24.37.71.230:54401/.i","pattern":"[url:value = 'http://24.37.71.230:54401/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf9179fe-f81b-09af-6f90-000032d97aa6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://77.50.222.238:51680/.i","pattern":"[url:value = 'http://77.50.222.238:51680/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3eb09d5c-7172-0ae0-4f0a-00009e5ed59f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://202.88.234.44:64615/.i","pattern":"[url:value = 'http://202.88.234.44:64615/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78b416d8-b9db-9a77-ac3b-0000a778e31c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://156.246.93.156/n2onsolana/armv5l","pattern":"[url:value = 'http://156.246.93.156/n2onsolana/armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a82745a-0adb-21c4-6465-0000ddb8b07c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://156.246.93.156/n2onsolana/armv7l","pattern":"[url:value = 'http://156.246.93.156/n2onsolana/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfd7aa72-eea0-4f6d-63bf-0000ef5cea5b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://156.246.93.156/n2onsolana/x86","pattern":"[url:value = 'http://156.246.93.156/n2onsolana/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5399451b-5a29-e13f-06be-0000e0d899cc","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://156.246.93.156/n2onsolana/armv6l","pattern":"[url:value = 'http://156.246.93.156/n2onsolana/armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09400318-bfb2-97b1-582c-0000bbb2a53c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://156.246.93.156/n2onsolana/mips","pattern":"[url:value = 'http://156.246.93.156/n2onsolana/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61af2799-4235-2ab7-f024-00009a18caac","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://156.246.93.156/n2onsolana/armv4l","pattern":"[url:value = 'http://156.246.93.156/n2onsolana/armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--781a6a6a-52a7-d83c-181f-0000d3467177","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://181.171.188.254:17418/.i","pattern":"[url:value = 'http://181.171.188.254:17418/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1a38db2-50cd-60e6-5ec5-0000f35e7b75","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://87.119.108.21:40462/.i","pattern":"[url:value = 'http://87.119.108.21:40462/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7589f785-7fd5-f12e-c4f7-0000dc11d04e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://52.248.41.253:8443/02.08.2022.exe","pattern":"[url:value = 'https://52.248.41.253:8443/02.08.2022.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e986518d-873b-0aae-1bb0-0000bae08794","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://156.246.93.156/busybox-armv7l","pattern":"[url:value = 'http://156.246.93.156/busybox-armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24cd78af-d548-0ac3-4055-000024611224","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://88.8.20.75:10002/sshd","pattern":"[url:value = 'http://88.8.20.75:10002/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b6d97a3-b8ab-47a2-f099-0000224ba7a4","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.173.12.30:17886/i","pattern":"[url:value = 'http://45.173.12.30:17886/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e554c16-a93c-7e33-7157-0000ab103f20","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://202.148.18.221:30944/i","pattern":"[url:value = 'http://202.148.18.221:30944/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89159d06-a032-dbf6-5f2c-000059c92929","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.89.189.98:46828/i","pattern":"[url:value = 'http://80.89.189.98:46828/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bc6a8a8-4b32-59a2-7ab9-000037c41849","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://36.67.246.82:22072/i","pattern":"[url:value = 'http://36.67.246.82:22072/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40918c38-07bc-f0e8-2f14-0000ce308553","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://213.6.196.230:27629/.i","pattern":"[url:value = 'http://213.6.196.230:27629/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--348700a8-18dd-c213-1b3b-000050c15fc1","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://103.93.200.20:2260/.i","pattern":"[url:value = 'http://103.93.200.20:2260/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb90a907-cbc1-8d97-9024-00007ef3c734","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://103.90.206.87:4419/.i","pattern":"[url:value = 'http://103.90.206.87:4419/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff581a65-f30b-8e44-b2bf-00006ff76f87","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://200.54.221.234:55031/.i","pattern":"[url:value = 'http://200.54.221.234:55031/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61adc761-9350-1965-8740-000091bf7a04","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://200.118.103.42:26816/.i","pattern":"[url:value = 'http://200.118.103.42:26816/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c29c7f8a-f922-58e0-af0b-000049ca616c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://36.64.227.134:63289/.i","pattern":"[url:value = 'http://36.64.227.134:63289/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a337c623-b2e2-dae0-6b5f-0000eb606873","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://103.90.206.87:4419/i","pattern":"[url:value = 'http://103.90.206.87:4419/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3aad357b-8d1d-069a-a74d-0000a684dfc6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://144.6.89.62:8083/sshd","pattern":"[url:value = 'http://144.6.89.62:8083/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27a805c3-33c7-3c51-589e-0000c2e5b20f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://144.6.89.62:8084/sshd","pattern":"[url:value = 'http://144.6.89.62:8084/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c3c2c9b-5d88-a8de-b4ae-0000136e05ca","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://31.55.236.199:8080/","pattern":"[url:value = 'http://31.55.236.199:8080/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c0bf3dd-780b-14fc-effc-0000d9648847","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://141.134.214.46/","pattern":"[url:value = 'http://141.134.214.46/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a67cfe3f-d32d-ea3c-3da0-000008cd1681","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://116.86.50.18:88/","pattern":"[url:value = 'http://116.86.50.18:88/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0691ff42-e5ee-916a-318c-0000934442a6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.147.3.138:88/","pattern":"[url:value = 'http://80.147.3.138:88/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2348b28e-d3af-0b78-26a1-0000b129769f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://220.246.34.66:8088/","pattern":"[url:value = 'http://220.246.34.66:8088/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82ec1914-e8f6-fa9b-b23c-0000dde549cb","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://174.71.238.196:81/","pattern":"[url:value = 'http://174.71.238.196:81/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c36c5e96-cc11-e6cf-03a7-00006dd4dc86","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://188.167.179.75:88/","pattern":"[url:value = 'http://188.167.179.75:88/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d783148f-1323-922c-5868-000044001c0b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://182.93.58.234:82/","pattern":"[url:value = 'http://182.93.58.234:82/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ef919d2-f281-0a31-29e7-0000251a474e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://213.165.183.55:83/","pattern":"[url:value = 'http://213.165.183.55:83/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d359599c-31e0-4417-fdfe-000079b10ba4","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://108.41.80.142:84/","pattern":"[url:value = 'http://108.41.80.142:84/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1db84825-a980-f0b9-c501-000037ea3f0b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.44.199.50/","pattern":"[url:value = 'http://78.44.199.50/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31d0cc06-4af8-bf8f-6223-0000116773bb","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://109.167.133.17/","pattern":"[url:value = 'http://109.167.133.17/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac8650eb-8efb-d51c-e4ae-0000efa10102","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://202.175.181.210:81/","pattern":"[url:value = 'http://202.175.181.210:81/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9474e5d-6527-9b28-66a0-000016504e4c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://121.101.79.178:88/","pattern":"[url:value = 'http://121.101.79.178:88/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48303aad-2d3c-2084-2bfb-000026a66500","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://92.43.24.71/","pattern":"[url:value = 'http://92.43.24.71/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc34396e-e280-42ce-302d-0000990fda47","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://193.165.245.46:8000/","pattern":"[url:value = 'http://193.165.245.46:8000/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58130e20-9c2c-feea-0c08-0000d6066f46","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://218.103.122.102:50956/","pattern":"[url:value = 'http://218.103.122.102:50956/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57b03a58-9931-3287-46c0-000078115704","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://124.36.156.140:8080/","pattern":"[url:value = 'http://124.36.156.140:8080/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4cff67c-1631-80e5-38e7-0000e0a04d54","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://90.180.227.121:81/","pattern":"[url:value = 'http://90.180.227.121:81/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--850afd1c-06b0-8f95-7d31-0000a08d69d1","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://159.196.16.186:88/","pattern":"[url:value = 'http://159.196.16.186:88/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9db4f60-73c1-5fe0-bd82-0000da41d6d1","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://87.138.104.129:4000/","pattern":"[url:value = 'http://87.138.104.129:4000/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08d33667-3da9-4199-76d8-00002f288a18","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://185.60.107.150:8080/","pattern":"[url:value = 'http://185.60.107.150:8080/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea1ef1d2-9898-9b19-73e5-00008dd34985","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://185.118.128.34:30117/i","pattern":"[url:value = 'http://185.118.128.34:30117/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--287dceca-a542-7e08-1156-00001383a151","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://47.152.112.236:8105/sshd","pattern":"[url:value = 'http://47.152.112.236:8105/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dd7df02-20ca-d239-418e-0000e9e50f0a","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://88.86.246.233:38185/sshd","pattern":"[url:value = 'http://88.86.246.233:38185/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb72f670-ca41-5d65-a02b-00005c6a7b2e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/pg.sh","pattern":"[url:value = 'http://78.153.140.16/pg.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--445a2d1f-2398-a354-425b-0000489843a2","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://200.122.211.138:31644/02.08.2022.exe","pattern":"[url:value = 'http://200.122.211.138:31644/02.08.2022.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d10e7aac-0c32-7ebb-0d2e-0000167c5d00","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/for","pattern":"[url:value = 'http://78.153.140.16/for']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a75098b-6169-c2a0-7e25-0000e8bb8faf","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/busybox","pattern":"[url:value = 'http://78.153.140.16/busybox']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4970a14-8061-1f2c-54f0-00007bdda0bb","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://96.66.24.241:39432/bin.sh","pattern":"[url:value = 'http://96.66.24.241:39432/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99a042a2-a65d-9245-f4c4-00003a134256","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://96.66.24.241:39432/i","pattern":"[url:value = 'http://96.66.24.241:39432/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90b52d4b-099d-4d2c-9782-000013983af3","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://213.87.112.128:47907/i","pattern":"[url:value = 'http://213.87.112.128:47907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa7f537d-52c5-7fc2-dbf2-0000f973dc3d","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://217.208.164.149:45464/i","pattern":"[url:value = 'http://217.208.164.149:45464/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21ae5d32-1605-31c9-a245-0000ede2d987","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/mt.sh","pattern":"[url:value = 'http://78.153.140.16/mt.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--348d6c93-25f3-6be3-0bc0-000051629805","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/curl-amd64","pattern":"[url:value = 'http://78.153.140.16/curl-amd64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33b01bf7-867c-97fe-f9e6-000026aa58de","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/sc.sh","pattern":"[url:value = 'http://78.153.140.16/sc.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c378fa78-4dec-8b22-c392-00001e198cbc","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/xx.sh","pattern":"[url:value = 'http://78.153.140.16/xx.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a311e626-117f-56cd-ade0-0000aa220bc7","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/ph.sh","pattern":"[url:value = 'http://78.153.140.16/ph.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2783abe3-cdb9-fe68-d63d-000066909cc8","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://90.224.208.161:48263/bin.sh","pattern":"[url:value = 'http://90.224.208.161:48263/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4529c55b-8301-736c-5afb-000060a03fdd","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://217.208.164.149:45464/bin.sh","pattern":"[url:value = 'http://217.208.164.149:45464/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d99a05e-f004-0a47-da10-0000b580d130","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://178.16.54.109/3.exe","pattern":"[url:value = 'http://178.16.54.109/3.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86a9a1bc-330b-6fe0-ac9e-00002024d4b8","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/armv5l","pattern":"[url:value = 'http://195.178.110.204/armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9721d6b-f9c1-7ccd-b575-0000f1931dca","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/mips","pattern":"[url:value = 'http://195.178.110.204/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c6247cd-8caf-6f63-6e7f-000071859977","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/i486","pattern":"[url:value = 'http://195.178.110.204/i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f858d7a9-7fbe-1f3b-bbca-00008916a9a7","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/mipsel","pattern":"[url:value = 'http://195.178.110.204/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfcb720b-8e99-4f79-913e-0000e99caabc","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/sh4","pattern":"[url:value = 'http://195.178.110.204/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a4edc52-3723-6c3f-b0e8-000027a759de","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/sparc","pattern":"[url:value = 'http://195.178.110.204/sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4157be1c-a652-4bc5-88b4-00006e03589a","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/powerpc","pattern":"[url:value = 'http://195.178.110.204/powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e55e29bd-63c9-abc5-36f0-0000f165cb10","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/m68k","pattern":"[url:value = 'http://195.178.110.204/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7da02dfa-8506-fa53-8911-0000bad94ad2","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/i586","pattern":"[url:value = 'http://195.178.110.204/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c7e00f8-f79f-1f24-f52f-0000f81c3bf1","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/mips64","pattern":"[url:value = 'http://195.178.110.204/mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--978ef74c-986c-bdb5-4830-0000dc0be8c0","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/y","pattern":"[url:value = 'http://195.178.110.204/y']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--775b1e52-e58e-d35e-4d47-0000b3b608a4","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/s","pattern":"[url:value = 'http://195.178.110.204/s']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e38bb67-09f1-51bd-0aab-000096dd5778","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/u","pattern":"[url:value = 'http://195.178.110.204/u']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bdae133-7afb-bca0-2833-0000f338e72b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://160.119.69.4/x","pattern":"[url:value = 'http://160.119.69.4/x']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6af8a1c7-dff6-9f9a-1d7d-000064ec3287","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.95.147.178/k.php","pattern":"[url:value = 'http://45.95.147.178/k.php']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de4d566d-8a41-cef2-78c8-000050f5dafc","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.95.147.178/x","pattern":"[url:value = 'http://45.95.147.178/x']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92e953f3-b7f6-fa4b-1964-00000bb4dcfe","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://216.107.139.197/WSW0","pattern":"[url:value = 'http://216.107.139.197/WSW0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8abb0fff-3a08-3538-3cc0-000091c50702","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://202.155.8.56/WSW0","pattern":"[url:value = 'http://202.155.8.56/WSW0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea7cbcb4-66e7-2299-c587-000027e2cf2b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.66.228.93/linux_arm7","pattern":"[url:value = 'http://45.66.228.93/linux_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e1dc5ee-e318-0e62-9dee-00008281f7c8","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.66.228.93/linux_mips64","pattern":"[url:value = 'http://45.66.228.93/linux_mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--264b2150-473f-4f55-e0bb-0000f55be6c3","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.66.228.93/linux_arm64","pattern":"[url:value = 'http://45.66.228.93/linux_arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f764bff4-438a-748d-3202-00006f398963","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://65.99.181.12:49304/bin.sh","pattern":"[url:value = 'http://65.99.181.12:49304/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7dfe611-74b4-96bf-f10e-0000f7da1721","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://88.88.191.25:4472/i","pattern":"[url:value = 'http://88.88.191.25:4472/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fc16a5d-a34b-0f5d-38ae-0000e3638969","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://103.83.87.122/run.sh","pattern":"[url:value = 'http://103.83.87.122/run.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa660add-08ed-08ef-0a2d-00002f19cfd0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://156.246.95.231/sys/A/white_notepad_rcdata.vbs","pattern":"[url:value = 'http://156.246.95.231/sys/A/white_notepad_rcdata.vbs']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4d080ec-73e9-0398-e5da-0000e9de2621","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://156.246.95.231/sys/A/34534.exe","pattern":"[url:value = 'http://156.246.95.231/sys/A/34534.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ef3efe0-4f2e-5617-3212-0000a0c6d9a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://156.246.95.231/sys/A/test.exe","pattern":"[url:value = 'http://156.246.95.231/sys/A/test.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--057c786f-2b66-4522-c3de-000009a8075f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://156.246.95.231/sys/A/EC_puller.vbs","pattern":"[url:value = 'http://156.246.95.231/sys/A/EC_puller.vbs']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25d46da1-4260-b285-f75d-00007d2171fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://217.217.97.36/bin/support.client.exe","pattern":"[url:value = 'https://217.217.97.36/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1b926d0-368d-b815-d5dd-0000089cf873","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://217.217.97.36/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://217.217.97.36/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04b44ebb-dfbe-7ffa-589d-00009f8b4145","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://195.177.94.245/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.245/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63c62796-20b6-1381-aed5-0000a52a546f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://195.177.94.245/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.245/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d4e10ef-2e1e-623a-7cf0-00008d6eacc8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.mediafire.com/file/yl2g3svth10bgzd/file","pattern":"[url:value = 'https://www.mediafire.com/file/yl2g3svth10bgzd/file']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc02676d-c2a6-d33a-a282-000070cb812d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://87.120.196.221/main_arm7","pattern":"[url:value = 'http://87.120.196.221/main_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7801392-6e87-2b88-aabb-000086b6eb25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://ferncurrent14.com/2kqYRM0DCrnyJgoS4gVLl_FHJRRdTUhGCbjyuYwpZ6c/DANTE/update","pattern":"[url:value = 'https://ferncurrent14.com/2kqYRM0DCrnyJgoS4gVLl_FHJRRdTUhGCbjyuYwpZ6c/DANTE/update']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--943ab489-5b23-b4bc-14ad-00005c37d73b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-c9224963ee6a49b194bba4acac778b13.r2.dev/VKJEROWP.msi","pattern":"[url:value = 'https://pub-c9224963ee6a49b194bba4acac778b13.r2.dev/VKJEROWP.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--702b61ca-f53e-b36b-2345-0000b814f5ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.26.83.35/ehrvdypc-gjc7hs5p-ysqckcka-5z3sw8fk/VKJEROWP.msi","pattern":"[url:value = 'http://94.26.83.35/ehrvdypc-gjc7hs5p-ysqckcka-5z3sw8fk/VKJEROWP.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8be91e69-e075-86f9-5f75-0000bee7d089","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.128/bins/c.sh","pattern":"[url:value = 'http://31.77.227.128/bins/c.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33f62a06-5ca6-af68-041f-0000cb4ea22e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://213.177.179.11/dodu","pattern":"[url:value = 'http://213.177.179.11/dodu']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e03630d9-0c92-632a-cc16-000066d2e89b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.5.60:34419/i","pattern":"[url:value = 'http://110.37.5.60:34419/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91549e80-b752-007d-7732-000096876cc6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.35.24:55742/i","pattern":"[url:value = 'http://125.43.35.24:55742/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--329a8b59-52ca-9c27-d80d-00005fb66b79","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.201.65:38304/bin.sh","pattern":"[url:value = 'http://95.155.201.65:38304/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d54ed1e-3cfc-cb23-98b2-00006518d395","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.56.232.109:37061/bin.sh","pattern":"[url:value = 'http://95.56.232.109:37061/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53a4ca38-38e9-287e-d064-00003ea0a9e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://81.227.43.110:42887/bin.sh","pattern":"[url:value = 'http://81.227.43.110:42887/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60ded292-1565-f417-aca7-0000d884711e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.12.46:51362/i","pattern":"[url:value = 'http://182.119.12.46:51362/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--880a31bf-e317-4fa6-876d-00001cfc12a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.88.136.194:55285/i","pattern":"[url:value = 'http://36.88.136.194:55285/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--288cb3f6-99d9-4c15-e24d-00006ed97894","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.231.36:58546/i","pattern":"[url:value = 'http://110.39.231.36:58546/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebc1c637-6dc6-c4f8-e123-0000a49134be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.1.200:38213/bin.sh","pattern":"[url:value = 'http://110.36.1.200:38213/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb3fcfc4-1067-691b-2657-000098d49d75","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://223.108.82.26:47552/bin.sh","pattern":"[url:value = 'http://223.108.82.26:47552/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41328f86-8896-3329-4b0e-00006502f7d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://204.244.176.203:60318/i","pattern":"[url:value = 'http://204.244.176.203:60318/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d373e04c-9a31-3df1-3c21-00001a84e2b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.207.236.63:53748/i","pattern":"[url:value = 'http://27.207.236.63:53748/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebf4f226-bccd-b33a-8ace-000054ecca2d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://223.108.82.26:47552/i","pattern":"[url:value = 'http://223.108.82.26:47552/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f78e8006-b09c-cd11-e56c-0000c1780f87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.89.147:43414/i","pattern":"[url:value = 'http://115.50.89.147:43414/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b8a97cf-e55d-7eb6-782b-00005de8e20b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.56.232.109:37061/i","pattern":"[url:value = 'http://95.56.232.109:37061/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a5a36d7-4732-a5b4-9a2d-00007e124f1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.222.47.36:58453/bin.sh","pattern":"[url:value = 'http://27.222.47.36:58453/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f995119-e5e4-6739-c66a-0000cdf29a9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://68.65.100.46:46734/bin.sh","pattern":"[url:value = 'http://68.65.100.46:46734/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fd168a7-b9cf-6416-4e76-000074b10dd9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.177.186.117:53442/i","pattern":"[url:value = 'http://42.177.186.117:53442/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b210d28b-0adf-8ccd-91b1-0000b7af0684","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.212.22:49662/i","pattern":"[url:value = 'http://125.44.212.22:49662/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bb2f98e-fe4d-bed8-f02a-0000ffccfb3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://123.170.100.105:42942/bin.sh","pattern":"[url:value = 'http://123.170.100.105:42942/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b5c09e7-8d40-4850-87b9-0000ebc42566","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.58.42.82:51830/i","pattern":"[url:value = 'http://59.58.42.82:51830/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b70a4e78-fa0c-c490-5b40-000020bbf764","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.109.219.147:35136/i","pattern":"[url:value = 'http://112.109.219.147:35136/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6704ad23-1c5c-080c-c737-0000d2b9bbcd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.9.201:37933/i","pattern":"[url:value = 'http://182.116.9.201:37933/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b2c0784-3624-d8e7-1d51-00006fd30c8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.157.37:32825/i","pattern":"[url:value = 'http://42.230.157.37:32825/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0daf83d9-2383-74e8-0fad-000020e93eed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.139.198.215:58197/i","pattern":"[url:value = 'http://222.139.198.215:58197/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--473b733a-e84d-1636-5dc0-00006893e6be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.226.240:39898/bin.sh","pattern":"[url:value = 'http://42.232.226.240:39898/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38c8f72c-277f-749f-ec2e-00000b63c7ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.228.252.188:39953/i","pattern":"[url:value = 'http://42.228.252.188:39953/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0fd93bc-5276-945e-85a9-0000a1521542","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.182.221:40037/i","pattern":"[url:value = 'http://123.14.182.221:40037/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--874095b0-4747-6e85-2b4d-00004bc284f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.26.18.38:48086/bin.sh","pattern":"[url:value = 'http://78.26.18.38:48086/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2902ca3c-de54-3500-cb8a-0000061c079b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.55.138.49:50980/i","pattern":"[url:value = 'http://42.55.138.49:50980/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a4ab16e-9742-3374-419c-0000dde894b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.90.145.143:54042/i","pattern":"[url:value = 'http://39.90.145.143:54042/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd6bc2f-6350-1ac4-e092-0000e0a7d2db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.207.139.137:59758/i","pattern":"[url:value = 'http://27.207.139.137:59758/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d56a0326-d181-d4b2-0ca8-00004efca4ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.214.25:35406/bin.sh","pattern":"[url:value = 'http://119.179.214.25:35406/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc169a74-c729-ea64-b959-0000d8f4521f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.152.37:45005/i","pattern":"[url:value = 'http://115.58.152.37:45005/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f969f88-bbd4-f214-64d3-0000f4e5af7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.126.192:55352/bin.sh","pattern":"[url:value = 'http://27.215.126.192:55352/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0af811b5-6451-2e6f-dc93-0000d75c2061","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.130.246:33076/i","pattern":"[url:value = 'http://115.58.130.246:33076/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8243fbd7-c618-cae4-65f5-0000642d4ec5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.9.201:37933/bin.sh","pattern":"[url:value = 'http://182.116.9.201:37933/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcbffa45-9c70-b3c8-7988-000037aaad53","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.228.149.193:49576/i","pattern":"[url:value = 'http://113.228.149.193:49576/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f58ec7c2-2eda-86b9-c039-0000e8e6e8db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.81.119:38169/bin.sh","pattern":"[url:value = 'http://182.126.81.119:38169/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc54e5d3-517d-8f79-0406-000034b65c5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.239.253:57738/bin.sh","pattern":"[url:value = 'http://110.39.239.253:57738/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--586343cb-6243-c340-0d72-000066631073","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.183.130.126:36331/i","pattern":"[url:value = 'http://119.183.130.126:36331/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b674a0b8-0789-2059-ecc0-0000c654e37c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.95.98.66:8012/linux","pattern":"[url:value = 'http://210.95.98.66:8012/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b197a64-3475-3528-2fb5-00000a131f65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.84.212:34554/i","pattern":"[url:value = 'http://110.37.84.212:34554/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac752a07-4e1e-545c-e8df-0000be3d1a1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.55.138.49:50980/bin.sh","pattern":"[url:value = 'http://42.55.138.49:50980/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbb3e23c-1b79-b4ae-4015-0000e7272af9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.231.92.171:60432/bin.sh","pattern":"[url:value = 'http://42.231.92.171:60432/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--086299e2-5237-0e04-3d6e-00005d2f704f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.26.18.38:48086/i","pattern":"[url:value = 'http://78.26.18.38:48086/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb5732a0-dfef-d464-fcef-000035718803","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.231.36:58546/bin.sh","pattern":"[url:value = 'http://110.39.231.36:58546/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7f7c57b-6064-349b-6332-00003986860c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.144.189:60356/i","pattern":"[url:value = 'http://182.121.144.189:60356/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b55b145-843b-a4a1-26b2-000064f8303c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.81.119:38169/i","pattern":"[url:value = 'http://182.126.81.119:38169/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07cb8976-ec79-541a-56d2-000042fd6971","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.239.252.36:36560/bin.sh","pattern":"[url:value = 'http://42.239.252.36:36560/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1628a5bc-6a11-e4a7-6e28-0000def7a29a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.212.22:49662/bin.sh","pattern":"[url:value = 'http://125.44.212.22:49662/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e9860d4-d3f3-6034-f0fa-0000e5dfa8dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.131.154.251:35768/bin.sh","pattern":"[url:value = 'http://124.131.154.251:35768/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f8675a7-39e5-1ba4-2bdf-00007ed2a5c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.8.245:37624/i","pattern":"[url:value = 'http://125.41.8.245:37624/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e28ec61-7aa0-4884-9ff7-00007a1df0fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.212.219:39234/bin.sh","pattern":"[url:value = 'http://27.215.212.219:39234/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aca99e15-a615-3fe6-5352-0000ae539841","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://108.168.0.60:36003/bin.sh","pattern":"[url:value = 'http://108.168.0.60:36003/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9645ab99-8e34-de54-2d73-00004df1167a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.20:35077/bin.sh","pattern":"[url:value = 'http://210.208.110.20:35077/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3331af8c-5398-bd60-8cc1-000064180765","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.234:41323/bin.sh","pattern":"[url:value = 'http://210.208.111.234:41323/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a155a8a-190d-045f-8d09-0000355d8a47","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.139.198.215:58197/bin.sh","pattern":"[url:value = 'http://222.139.198.215:58197/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e72c471b-3301-e3e0-b2a6-000069e5bcf9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.130.246:33076/bin.sh","pattern":"[url:value = 'http://115.58.130.246:33076/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee11c422-4a61-2391-b5ef-00000a99e576","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.87.169.3:39736/bin.sh","pattern":"[url:value = 'http://42.87.169.3:39736/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0236e05-e17d-25d3-fd91-0000aba4b0ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.1.226.175:51370/bin.sh","pattern":"[url:value = 'http://221.1.226.175:51370/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d63e6f04-0bef-5938-4eb1-0000d07b8767","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.90.244:47446/i","pattern":"[url:value = 'http://221.15.90.244:47446/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9d741f2-a2ae-d1df-3e57-0000b3e3dbea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://89.189.181.54:34451/i","pattern":"[url:value = 'http://89.189.181.54:34451/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5307589-d618-c628-274a-00006e03d81b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.175.215.229:57947/bin.sh","pattern":"[url:value = 'http://175.175.215.229:57947/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3aa06f17-d780-c92a-b394-0000d9ac24e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.209.101.105:37817/i","pattern":"[url:value = 'http://221.209.101.105:37817/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4a0e3f6-2606-c7ba-bab6-0000e6ba49ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://58.51.204.238:50663/bin.sh","pattern":"[url:value = 'http://58.51.204.238:50663/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2351ca65-96e3-bd19-c848-0000971312e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.61.120.117:43905/i","pattern":"[url:value = 'http://115.61.120.117:43905/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a228ea9a-ecf9-72b3-a837-000095d6cbb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.31.157:39851/bin.sh","pattern":"[url:value = 'http://42.224.31.157:39851/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b653a00e-f37a-18fd-22be-0000a28dd4b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.205.38:37725/i","pattern":"[url:value = 'http://182.113.205.38:37725/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63dc7e17-8447-c647-928a-0000d3c63abf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.80.162:46146/bin.sh","pattern":"[url:value = 'http://110.36.80.162:46146/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31d1c874-b421-f843-2ac8-000055793a17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.141.220:34479/bin.sh","pattern":"[url:value = 'http://182.121.141.220:34479/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--122ee7c0-bae9-92e3-238b-0000a830bb18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.108.27.91:45906/bin.sh","pattern":"[url:value = 'http://91.108.27.91:45906/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c71d815e-f6c6-951d-8a2f-0000d3ca8300","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.225.228.107:44103/i","pattern":"[url:value = 'http://42.225.228.107:44103/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8e5a8ee-955d-329b-403f-0000e1b498ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.154.174.185:43822/bin.sh","pattern":"[url:value = 'http://219.154.174.185:43822/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3842b541-c5b9-eb18-2f26-0000844ed820","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.190.203.254:46174/bin.sh","pattern":"[url:value = 'http://123.190.203.254:46174/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c263d5e1-d5ae-c0ca-8c1c-000074a2fe43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://42.54.177.157:60692/bin.sh","pattern":"[url:value = 'http://42.54.177.157:60692/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cd4fd15-e9a3-70af-2fa4-0000ce37ad34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.180.11.230:34276/i","pattern":"[url:value = 'http://42.180.11.230:34276/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e7ef819-3033-f459-ff34-00008c59eac1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.201.65:38304/i","pattern":"[url:value = 'http://95.155.201.65:38304/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03f6fa22-2011-732b-5c79-00007532893d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.212.219:39234/i","pattern":"[url:value = 'http://27.215.212.219:39234/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d415eb39-c4d3-b2f9-e4c3-00000f9b55a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.225.228.107:44103/bin.sh","pattern":"[url:value = 'http://42.225.228.107:44103/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adc12c11-59af-71b8-51c3-00003cc015cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://47.107.63.26:8127/linux","pattern":"[url:value = 'http://47.107.63.26:8127/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aea798a1-e801-8be7-960d-0000dde6440e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.126.192:55352/i","pattern":"[url:value = 'http://27.215.126.192:55352/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--432cc46e-f58e-3c80-ba83-00002b71dd6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.49.47:47425/i","pattern":"[url:value = 'http://219.157.49.47:47425/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--426708ec-1587-777e-a44c-00004f8112db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.141.220:34479/i","pattern":"[url:value = 'http://182.121.141.220:34479/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfb08f0d-4028-da36-1e5e-00008bd4e12a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.0.62.242:40182/i","pattern":"[url:value = 'http://175.0.62.242:40182/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--032703bc-eae7-6673-ce09-0000b615a471","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.226.240:39898/i","pattern":"[url:value = 'http://42.232.226.240:39898/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58217655-8b1b-ac4c-030b-0000ab0d6783","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.80.162:46146/i","pattern":"[url:value = 'http://110.36.80.162:46146/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cd309c4-d72e-3ba8-75d2-0000acc84389","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.175.215.229:57947/i","pattern":"[url:value = 'http://175.175.215.229:57947/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3526726d-b432-6a1b-69d3-00007b7d8361","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.84.212:34554/bin.sh","pattern":"[url:value = 'http://110.37.84.212:34554/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18c27f7b-c684-930c-1c83-0000711f04a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.0.62.242:40182/bin.sh","pattern":"[url:value = 'http://175.0.62.242:40182/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b27f6de5-ef5f-cfc8-a79c-00004bb62e10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://183.23.139.207:35951/Mozi.a","pattern":"[url:value = 'http://183.23.139.207:35951/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--801acb44-9f21-63b0-7de1-0000568997cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.57.199.157:51293/bin.sh","pattern":"[url:value = 'http://115.57.199.157:51293/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f8bde2f-8fc9-0146-dc0b-0000a2b6f6c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.148.245:54758/i","pattern":"[url:value = 'http://115.48.148.245:54758/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9573221e-09c3-e713-bc7c-00008c70ade7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.179.152.19:54189/i","pattern":"[url:value = 'http://42.179.152.19:54189/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f02b749-cfc4-4761-e332-0000ceb7aaed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.131.53.180:42721/bin.sh","pattern":"[url:value = 'http://124.131.53.180:42721/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e7c9aa8-a3dc-68aa-ea03-0000f100167f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://42.85.180.51:37572/bin.sh","pattern":"[url:value = 'http://42.85.180.51:37572/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84eabae9-7579-d7f9-623c-00000cb0e351","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://156.146.24.110:51345/i","pattern":"[url:value = 'http://156.146.24.110:51345/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--612b68af-d6f4-76a9-980b-000027ca477d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.250.158.32:40802/i","pattern":"[url:value = 'http://167.250.158.32:40802/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82e2328c-1057-f74c-f31e-0000bf2d70ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://213.177.179.11/gots","pattern":"[url:value = 'http://213.177.179.11/gots']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4bcd508-5457-d9e6-1d82-0000c4fdda5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.93.190:47055/i","pattern":"[url:value = 'http://123.14.93.190:47055/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79002155-0fd0-ea81-2e9e-0000129ebc6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.35.24:55742/bin.sh","pattern":"[url:value = 'http://125.43.35.24:55742/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ace6723c-af15-fd8b-bc22-00008d6705cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.204.233.111:45429/bin.sh","pattern":"[url:value = 'http://27.204.233.111:45429/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62c1752d-1cd9-d848-e480-00007ac8efea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.90.145.143:54042/bin.sh","pattern":"[url:value = 'http://39.90.145.143:54042/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08cabaf6-b6fa-e790-2f42-000020a42758","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.144.189:60356/bin.sh","pattern":"[url:value = 'http://182.121.144.189:60356/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9370e9c6-caee-16a8-ad5a-0000beed9656","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.220:51409/i","pattern":"[url:value = 'http://210.208.111.220:51409/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e902618b-fc3b-0447-c0ec-00008bfe8aec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.131.53.180:42721/i","pattern":"[url:value = 'http://124.131.53.180:42721/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--096cdd7b-0474-19fa-a7c9-0000dc405437","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://180.252.223.220:38837/i","pattern":"[url:value = 'http://180.252.223.220:38837/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81c5f737-9e13-2edc-2455-000065a1f77f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.148.129.253:43457/bin.sh","pattern":"[url:value = 'http://123.148.129.253:43457/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7493333f-aa1e-b815-cfe3-0000462c40b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://8.138.19.119:9777/linux","pattern":"[url:value = 'http://8.138.19.119:9777/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbb11c1b-56c0-1355-df48-0000be14d783","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.26.226.42:41542/i","pattern":"[url:value = 'http://117.26.226.42:41542/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55299827-ee9b-31fd-1dcd-0000325e8de0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.220:51409/bin.sh","pattern":"[url:value = 'http://210.208.111.220:51409/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--faaf24fd-2e63-6991-f820-0000feebfa08","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://gray-dyane-31.tiiny.site/index.json","pattern":"[url:value = 'https://gray-dyane-31.tiiny.site/index.json']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abf6e07d-babe-d613-05b6-0000a2ff1ac3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.83.31.27/main/pure.bat","pattern":"[url:value = 'http://45.83.31.27/main/pure.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51886f31-1f21-2981-d6b8-0000d0d9b622","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/pwcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/pwcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ffe0a0d-0915-a182-6401-00005c44e133","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/HTTP/img_043214.png","pattern":"[url:value = 'http://178.16.53.176/HTTP/img_043214.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fc5215a-0c57-0996-89ed-0000f2cccd9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/HTTP/crypted1.ps1","pattern":"[url:value = 'http://178.16.53.176/HTTP/crypted1.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--338ada5b-e8fb-4e00-0884-0000e225c367","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4f77864d0a6bff5e.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4f77864d0a6bff5e.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f2ba57c-f021-3287-e41a-0000d6516539","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/kliulij.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/kliulij.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da9d0d11-8d9e-aaae-6877-0000d2821d87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/xqAAE.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/xqAAE.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48cb4a22-870e-d82a-55c7-0000c99f6bdf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/obsh/R7.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/obsh/R7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b320519e-0f72-b7b6-1ebe-00009b359c3a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/bjbh.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/bjbh.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01672fc5-edae-f54a-caf0-0000a2d8dd92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/obsh/crz.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/obsh/crz.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7772b37a-6cdb-1784-ae09-0000dcf34534","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/xqAAE.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/xqAAE.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdfc2bea-7a96-67c7-3ab4-00009278533b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/KLHdfs.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/KLHdfs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cacb83c-5dcc-151c-0555-00002a7b9255","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/obsh/mixres3.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/obsh/mixres3.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e3a8a18-dd03-3664-1f6c-0000e1231e6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/KJHJHKJKJH.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/KJHJHKJKJH.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c1cd6af-94b4-64ce-f5c4-0000e53161a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/KLLNMF.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/KLLNMF.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4bb6575-411f-415c-a4b3-0000e2751a47","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/ojujn.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/ojujn.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b167cf4-e74e-cbbd-bd66-000031e51d32","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/bjbh.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/bjbh.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--189c2c22-f550-4f1f-1b40-00000f3763f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/obsh/crz.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/obsh/crz.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afcff6fa-85f1-dada-521e-000005182a1d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/hnmh.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/hnmh.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56d181c1-ef7f-4be3-cfe2-0000b757f2c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/KLLNMF.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/KLLNMF.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a581c1ca-4bef-1d80-dc1f-000020100324","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/arFtU.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/arFtU.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a661ef52-a60c-d0bc-4e3e-0000781d013b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/obsh/mixres3.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/obsh/mixres3.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed761aec-8865-6c79-0a84-00005dc54255","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/hjbk.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/hjbk.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9aecdd26-4324-11f7-2133-0000559c6a67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/jhgkuyyg.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/jhgkuyyg.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dffedcb4-796f-659f-efe0-000041a946b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/obsh/R7.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/obsh/R7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ac3c65c-47d5-2cd7-fab6-00000e1d7122","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/obsh/zalupa.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/obsh/zalupa.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--949d8595-4157-0ce7-b01a-0000c7e4bcd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/jhgkuyyg.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/jhgkuyyg.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48d510ca-73f8-e01b-1fad-0000d435627a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/kJHGFDs.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/kJHGFDs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1954db1e-b1e0-d180-08f9-0000ec0442f4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/ojujn.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/ojujn.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68da59df-00db-3617-286c-00007fdcea1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/KLHdfs_260731110521.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/KLHdfs_260731110521.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6e98d2e-0e63-7a1e-87fe-0000915e9228","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/obsh/mixnew1.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/obsh/mixnew1.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c24da40-fe94-2276-ae1f-0000c3380146","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/obsh/mixnew1.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/obsh/mixnew1.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65403786-93e3-daf9-bc46-0000f715c35d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/hjbk.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/hjbk.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd0284d2-c80d-46d1-979f-0000cb9a984e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/soft/cheat_X.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/soft/cheat_X.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27f9db90-754b-8328-0b78-0000afc8ab15","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/hnmh.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/hnmh.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75ab6392-3081-0101-9e0f-000005356b41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/obsh/R6.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/obsh/R6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e309460-e85c-3c6f-a9be-00008f55f112","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/soft/hIEGQ.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/soft/hIEGQ.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5a105b9-c795-827b-7e8f-0000e25fe7ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/obsh/build_mix.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/obsh/build_mix.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93903773-416e-7831-96b9-0000c2c9a044","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/ARbeb.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/ARbeb.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbd05d0a-09ca-b81a-2605-00007027314e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/obsh/build_mix.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/obsh/build_mix.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67317c84-87df-2aa5-574c-0000c01ec055","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/KLHdfs.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/KLHdfs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d462a0d4-6931-a79a-bb8a-0000734d640b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/KJHJHKJKJH.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/KJHJHKJKJH.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5fb2474-2a00-f07e-81b5-00007c094ff5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/kliulij.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/kliulij.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--086e7fa1-5cca-d862-c7c7-00002e615b97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/arFtU.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/arFtU.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e7f8918-9c13-8192-2dc0-0000ccb8f8f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/ARbeb.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/ARbeb.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e20591c2-0240-340d-4ccd-00007e6d48b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/kJHGFDs.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/kJHGFDs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68690e4e-e16f-46c1-1c37-0000249f117e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/soft/muvaro.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/soft/muvaro.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b578b3a-1b58-95e1-f1cf-0000f0f2a044","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.175.88.87/22/goodpersonforbestthingsfor.hta","pattern":"[url:value = 'http://107.175.88.87/22/goodpersonforbestthingsfor.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ec02de0-9569-8c4a-e5ef-0000e6da0ddf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.175.88.87/22/img_203145.png","pattern":"[url:value = 'http://107.175.88.87/22/img_203145.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2f2f892-bfc2-332f-25fc-00008537d117","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://172.245.209.133/70/img_201031.png","pattern":"[url:value = 'http://172.245.209.133/70/img_201031.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd79b9d8-c407-2ad0-bb5a-00006b32fdb2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://172.245.209.133/70/weprovideforbesthingstocomebackgoodthings.hta","pattern":"[url:value = 'http://172.245.209.133/70/weprovideforbesthingstocomebackgoodthings.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e829e11-222c-6f8d-0f94-000005e6c91f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://ryanborn.net/DAD/crypted.ps1","pattern":"[url:value = 'https://ryanborn.net/DAD/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df009767-af57-404e-1b0d-000087ee8409","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://ryanborn.net/POT/crypted.ps1","pattern":"[url:value = 'https://ryanborn.net/POT/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b80b72bc-a1fe-b6da-e704-0000b2e9809e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://effectively32.infinityfree.me/img_072806.png","pattern":"[url:value = 'https://effectively32.infinityfree.me/img_072806.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68918ac6-5911-23a3-c96d-000027307c27","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://muddy-sound-e0cd.nodetectonn.workers.dev/ohYCb","pattern":"[url:value = 'https://muddy-sound-e0cd.nodetectonn.workers.dev/ohYCb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d05447cf-57f4-f836-6fa9-0000bdbbd82c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.103/sshd","pattern":"[url:value = 'http://94.154.43.103/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a8a712-87c3-fe9e-ba68-0000d29f3343","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.i686","pattern":"[url:value = 'http://94.154.43.236/exodus.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d13c29da-5816-b544-cf84-00001f4116f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.mips","pattern":"[url:value = 'http://94.154.43.236/exodus.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf36deeb-1976-2c16-b2fb-000081c00728","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.sh4","pattern":"[url:value = 'http://94.154.43.180/iran.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6366143-0d77-d7d6-4e98-000035f6b9be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.sh4","pattern":"[url:value = 'http://94.154.43.236/exodus.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5d85feb-f223-d1a0-016f-0000e4ea6157","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.armv6l","pattern":"[url:value = 'http://94.154.43.180/iran.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb4a524a-edd5-83ff-e472-000097ffda0b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.arm5","pattern":"[url:value = 'http://94.154.43.236/exodus.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05ee194b-eeb7-da14-bf46-0000540b41ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.i586","pattern":"[url:value = 'http://94.154.43.236/exodus.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcc36eaa-8bc0-e79c-f6ce-0000d98a48e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.armv7l","pattern":"[url:value = 'http://94.154.43.180/iran.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c4d62dc-8219-6314-6f7c-00002f43bd6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.arm4","pattern":"[url:value = 'http://94.154.43.236/exodus.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9650117c-2f85-bdff-ffd2-0000912fa6e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.sparc","pattern":"[url:value = 'http://94.154.43.236/exodus.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d101d0c-8713-c2f8-451f-00001fb7c02f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.m68k","pattern":"[url:value = 'http://94.154.43.236/exodus.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--090802bf-f507-76d0-119a-00000699163a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.mips","pattern":"[url:value = 'http://94.154.43.180/iran.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--724303f0-67c8-a797-6c3d-0000854a75e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.arm6","pattern":"[url:value = 'http://94.154.43.236/exodus.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eef50c28-df23-a619-d2fb-0000a34a1b87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.armv5l","pattern":"[url:value = 'http://94.154.43.180/iran.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05443366-4eb7-ce65-a7e4-00003df61280","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.arm7","pattern":"[url:value = 'http://94.154.43.236/exodus.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab50b080-255a-9196-be0f-00009aeda1c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.sparc","pattern":"[url:value = 'http://94.154.43.180/iran.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90047a3d-f63e-ceb5-57e6-00000a786698","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.mipsel","pattern":"[url:value = 'http://94.154.43.180/iran.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd62605a-9b1e-9a6b-022c-0000531c85a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.x86_64","pattern":"[url:value = 'http://94.154.43.180/iran.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7ee3d69-e87e-4266-c780-00009e2a3237","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.armv4l","pattern":"[url:value = 'http://94.154.43.180/iran.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83648314-b097-6b16-e865-0000b5282048","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.ppc","pattern":"[url:value = 'http://94.154.43.236/exodus.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b65db5ec-78e0-22fe-8129-0000d8e61b68","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.powerpc","pattern":"[url:value = 'http://94.154.43.180/iran.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64eeef13-a156-4805-9840-0000744278bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.mpsl","pattern":"[url:value = 'http://94.154.43.236/exodus.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aed6b2da-7eaa-5fc7-fa0e-0000cd2b4e3d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.x86","pattern":"[url:value = 'http://94.154.43.236/exodus.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45243669-047e-8985-6cf6-0000066fc0e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.m68k","pattern":"[url:value = 'http://94.154.43.180/iran.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e3dec87-685c-f6c2-65ec-0000baafb874","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://muddy-sound-e0cd.nodetectonn.workers.dev/xBEiV","pattern":"[url:value = 'https://muddy-sound-e0cd.nodetectonn.workers.dev/xBEiV']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5a43ba3-7fc1-fc60-6a28-0000c2412efb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://wealthishealth.free.je/img_234525.png","pattern":"[url:value = 'https://wealthishealth.free.je/img_234525.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8f1c554-5e88-9233-06c3-0000e3f422bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mailglobalsbg.com/Supply%20order/SO_08072026.rar","pattern":"[url:value = 'https://mailglobalsbg.com/Supply%20order/SO_08072026.rar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d02273c-a46d-e2ca-8b47-0000edcc8a3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mailglobalsbg.com/Supply%20order/crypted.zip.ps1","pattern":"[url:value = 'https://mailglobalsbg.com/Supply%20order/crypted.zip.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0bc95a3-7132-7281-801e-0000e1a927df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://89.23.107.5/m/jscotbpl.dat","pattern":"[url:value = 'https://89.23.107.5/m/jscotbpl.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--594bc740-ef19-dbf8-053c-0000e15911a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://meridia.rs/filess/Teleg.exe","pattern":"[url:value = 'https://meridia.rs/filess/Teleg.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0aa025a-432a-49d3-13d2-00009168c67c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.93.29/hmszch/steepleadmit.ps1","pattern":"[url:value = 'http://31.76.93.29/hmszch/steepleadmit.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a33c14e4-e583-bfc3-39f8-00005b5c96a3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.93.29/hmszch/electricityjog.ps1","pattern":"[url:value = 'http://31.76.93.29/hmszch/electricityjog.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5339bafb-da5c-b00d-c541-00000cc817f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://res.cloudinary.com/t3swaz48/image/upload/v1786063446/img_204228_kc4cit.jpg","pattern":"[url:value = 'https://res.cloudinary.com/t3swaz48/image/upload/v1786063446/img_204228_kc4cit.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c12d7373-8557-b0a4-ec45-0000e30ce526","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://res.cloudinary.com/t3swaz48/image/upload/v1786064222/img_205416_efsex4.jpg","pattern":"[url:value = 'https://res.cloudinary.com/t3swaz48/image/upload/v1786064222/img_205416_efsex4.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3707c6ed-edd7-e397-89c1-00005688e301","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/accrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/accrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--232f9ec8-2783-55b2-3b30-00002fd918b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4b9ed200c95f2598.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4b9ed200c95f2598.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a553b7c-1af4-fa3d-2010-00008e2e9e53","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.156.97.162:50385/bin.sh","pattern":"[url:value = 'http://61.156.97.162:50385/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d281863b-004a-a270-7337-00002b2ec376","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://116.59.13.48:57768/bin.sh","pattern":"[url:value = 'http://116.59.13.48:57768/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b13cfef-2505-2ddb-c642-00009e145807","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.156.97.162:50385/i","pattern":"[url:value = 'http://61.156.97.162:50385/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d52b82c-1329-4f79-b9f5-00006c58ee6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://yakult-hk.com/DDOS.zip","pattern":"[url:value = 'http://yakult-hk.com/DDOS.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f901d84-c505-e7a0-02ec-00001d290935","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.185.19:44899/bin.sh","pattern":"[url:value = 'http://123.14.185.19:44899/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55d3d92a-5dd6-f31c-c7f5-00008e8c7bf5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.118.111:40216/i","pattern":"[url:value = 'http://110.37.118.111:40216/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7efad9f-2e96-5620-12f1-000029258799","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://159.255.7.120:59678/bin.sh","pattern":"[url:value = 'http://159.255.7.120:59678/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6af4847e-af3a-adf1-5ee3-00004f266bd4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.185.19:44899/i","pattern":"[url:value = 'http://123.14.185.19:44899/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ffe5662-47df-58cd-4d77-000009c17fb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://116.59.13.48:57768/i","pattern":"[url:value = 'http://116.59.13.48:57768/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05604c9f-2fa6-07eb-d93c-00001347db37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.17.189:45420/i","pattern":"[url:value = 'http://182.121.17.189:45420/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef80b587-67d3-e66c-02c8-000064069199","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.8.131.222:37740/i","pattern":"[url:value = 'http://27.8.131.222:37740/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d13a441-2590-d801-d9e0-0000cbfb9a17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.10.99:39779/bin.sh","pattern":"[url:value = 'http://123.129.10.99:39779/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2104c949-7f6e-1c57-52c9-000096685bde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.110:42979/bin.sh","pattern":"[url:value = 'http://196.189.98.110:42979/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bee8b584-453c-729f-29a5-00002529c6fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.181.142:56703/bin.sh","pattern":"[url:value = 'http://123.14.181.142:56703/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55c461d1-e868-978f-9fc8-000098d246b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://quick-load.vercel.app/api/settings/windows","pattern":"[url:value = 'https://quick-load.vercel.app/api/settings/windows']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--843a0d62-d1b1-5535-f37a-0000cc87fd9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://quick-load.vercel.app/api/settings/linux","pattern":"[url:value = 'https://quick-load.vercel.app/api/settings/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20b44b8b-a344-134c-2106-0000c69750b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://quick-load.vercel.app/api/settings/mac","pattern":"[url:value = 'https://quick-load.vercel.app/api/settings/mac']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fcb5055-7f4a-29ba-4f67-0000280cefa6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.95.24.225:32836/bin.sh","pattern":"[url:value = 'http://124.95.24.225:32836/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27f4e67a-0b83-e6af-30d9-00001fe4ca60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.181.142:56703/i","pattern":"[url:value = 'http://123.14.181.142:56703/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf4b338a-267d-7840-f99a-00000db1261f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.25.131:51261/bin.sh","pattern":"[url:value = 'http://222.137.25.131:51261/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d136039-0a77-ef04-2eab-00003e8fb1e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.95.24.225:32836/i","pattern":"[url:value = 'http://124.95.24.225:32836/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffd47610-892b-2c81-aa00-0000108b2e9c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.8.245:37624/bin.sh","pattern":"[url:value = 'http://125.41.8.245:37624/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a1ac36e-a329-1a26-a3a6-0000ab8ade39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.25.131:51261/i","pattern":"[url:value = 'http://222.137.25.131:51261/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c6d0d68-bcb9-4ac3-1234-0000341fbc92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.110:42979/i","pattern":"[url:value = 'http://196.189.98.110:42979/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--134c44b5-3654-0dd7-dc93-0000dc9cfefc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.22.216:46217/i","pattern":"[url:value = 'http://110.37.22.216:46217/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a85dba9-9067-8ce3-1f7a-0000ddc14850","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://218.24.27.232:57681/i","pattern":"[url:value = 'http://218.24.27.232:57681/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49e6111d-a554-7463-2dba-0000fa381199","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.72.194:41902/i","pattern":"[url:value = 'http://110.36.72.194:41902/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c144434-ff5b-c30e-f089-000059db56c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.148.113:60247/bin.sh","pattern":"[url:value = 'http://123.5.148.113:60247/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4c15894-b400-636f-7282-0000906d700c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.148.113:60247/i","pattern":"[url:value = 'http://123.5.148.113:60247/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e2e33b8-564a-bd32-19fc-000017868287","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://93.105.205.92.host.secureserver.net/g1/sc.txt","pattern":"[url:value = 'https://93.105.205.92.host.secureserver.net/g1/sc.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--038d247f-60c0-71c4-7d00-0000c93a74fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://93.105.205.92.host.secureserver.net/g1/exe.txt","pattern":"[url:value = 'https://93.105.205.92.host.secureserver.net/g1/exe.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad608ac7-0655-9208-3da8-0000ec48d45f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://93.105.205.92.host.secureserver.net/g1/6.txt","pattern":"[url:value = 'https://93.105.205.92.host.secureserver.net/g1/6.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa73a8ec-455a-10ec-5d7f-0000fb5c7af7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/auto","pattern":"[url:value = 'http://rippled.cleverpondky.com/auto']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--989207b4-f6f5-9d27-4edd-000067617755","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/oldboss","pattern":"[url:value = 'http://rippled.cleverpondky.com/oldboss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cbc1f90-edbe-4035-6d88-000006e80ceb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/checkmacos.sh","pattern":"[url:value = 'http://rippled.cleverpondky.com/checkmacos.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f646456c-f172-223f-422c-0000a70a28f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/traffaarch","pattern":"[url:value = 'http://rippled.cleverpondky.com/traffaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ab19061-d388-70be-a8da-00007044ede3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/cliaarch","pattern":"[url:value = 'http://rippled.cleverpondky.com/cliaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc084d49-621a-aec4-7c4a-0000c0314a67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/proot","pattern":"[url:value = 'http://rippled.cleverpondky.com/proot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7c31947-5b39-583d-2c9f-000018cee44e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/check1.sh","pattern":"[url:value = 'http://rippled.cleverpondky.com/check1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3250288-9830-7d05-5cde-00006262b9b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/check.sh","pattern":"[url:value = 'http://rippled.cleverpondky.com/check.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a9a324c-f5d8-be65-dbb6-0000705c1f0b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/auto1","pattern":"[url:value = 'http://rippled.cleverpondky.com/auto1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--887deef8-7bd0-fa93-d170-0000a1e8b4ad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/cli","pattern":"[url:value = 'http://rippled.cleverpondky.com/cli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f6a0f0a-f3c8-5e84-3b44-0000d31e549e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.51.80.33:54187/Mozi.m","pattern":"[url:value = 'http://115.51.80.33:54187/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3882caac-2f10-e977-6908-000016b73c5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/Error84","pattern":"[url:value = 'http://rippled.cleverpondky.com/Error84']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66aa9fe6-ab9d-a766-3855-000099c335f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/wd1337","pattern":"[url:value = 'http://rippled.cleverpondky.com/wd1337']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe714c3b-0e76-14e1-76c9-0000a7860e82","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/syst3md","pattern":"[url:value = 'http://rippled.cleverpondky.com/syst3md']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44d5db07-5cc4-74cc-5839-0000654c69e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/nvidia.sh","pattern":"[url:value = 'http://rippled.cleverpondky.com/nvidia.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a237eb2c-b516-98a7-bbb0-0000c01675a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/boss","pattern":"[url:value = 'http://rippled.cleverpondky.com/boss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fb4d701-19e6-fc6c-6a5c-0000f7c10b9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/log","pattern":"[url:value = 'http://rippled.cleverpondky.com/log']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--216d0c82-9661-67cc-c107-00008971d888","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/traff","pattern":"[url:value = 'http://rippled.cleverpondky.com/traff']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a130b84-df86-cb17-9a2d-000075006ecd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.94.125.230:34268/bin.sh","pattern":"[url:value = 'http://124.94.125.230:34268/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--684b83df-b447-5f66-edce-00008303645b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://quick-load.vercel.app/api/settings/package","pattern":"[url:value = 'https://quick-load.vercel.app/api/settings/package']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc5271bd-3810-53c5-246e-00008ab1507e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://quick-load.vercel.app/api/settings/bootstrap","pattern":"[url:value = 'https://quick-load.vercel.app/api/settings/bootstrap']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4e2e217-7f40-bb84-fcba-0000cf53e2a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quick-load.vercel.app/api/settings/env","pattern":"[url:value = 'https://quick-load.vercel.app/api/settings/env']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cca01b0-242b-d3ec-b93a-00005382a15d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.147.12:50068/i","pattern":"[url:value = 'http://115.56.147.12:50068/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c748cd43-6789-2165-7133-000080f91651","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.230.18.121:41849/bin.sh","pattern":"[url:value = 'http://115.230.18.121:41849/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4995ac20-c17c-168e-3637-00004eec9729","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.87.190.196:42583/bin.sh","pattern":"[url:value = 'http://42.87.190.196:42583/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a9701f0-1333-eac2-2ff6-000036c201b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.72.194:41902/bin.sh","pattern":"[url:value = 'http://110.36.72.194:41902/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8428eac-e6f5-e444-f4b7-000019c6740b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.10.15:35093/bin.sh","pattern":"[url:value = 'http://115.56.10.15:35093/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3879d905-1237-821d-d92c-00008b9e30b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.87.190.196:42583/i","pattern":"[url:value = 'http://42.87.190.196:42583/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42ad9130-3f23-5ccb-fc44-00001020c472","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.195.117:36837/bin.sh","pattern":"[url:value = 'http://221.15.195.117:36837/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--890601e8-b4e1-0214-6a9a-0000a3ff504b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.10.15:35093/i","pattern":"[url:value = 'http://115.56.10.15:35093/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e603698-7be5-f8d2-4e46-0000c3d85c55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.239.231.246:37689/bin.sh","pattern":"[url:value = 'http://42.239.231.246:37689/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56d056c7-967f-8ee5-1702-00000aa4ed3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.195.117:36837/i","pattern":"[url:value = 'http://221.15.195.117:36837/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--198f5b41-af52-a024-3239-0000a166b86e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.239.231.246:37689/i","pattern":"[url:value = 'http://42.239.231.246:37689/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39a383ad-d2fd-e6e1-b2e0-00007aa7b27e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.142.223.175:57022/bin.sh","pattern":"[url:value = 'http://222.142.223.175:57022/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af01609c-61f4-0054-34d4-000012855fa4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.88.229:47375/bin.sh","pattern":"[url:value = 'http://182.116.88.229:47375/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c85e272f-8cb1-eed8-2638-000091718a2d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.122.234.134:45451/bin.sh","pattern":"[url:value = 'http://182.122.234.134:45451/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d738e191-62ae-45a7-6c3a-000067c0ed8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.151.217.170:55986/bin.sh","pattern":"[url:value = 'http://175.151.217.170:55986/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b55ed7e1-0b90-08f1-1aee-00001efcd0a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.94.116.98:56771/i","pattern":"[url:value = 'http://124.94.116.98:56771/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68d01189-9b82-34a4-3c67-0000cf98940d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.68.239:60182/bin.sh","pattern":"[url:value = 'http://196.189.68.239:60182/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cb7993e-2864-5352-2d43-00002f059a14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.10.146.56:33546/i","pattern":"[url:value = 'http://123.10.146.56:33546/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62187c11-8a8d-1ed1-a2b1-000079742227","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.88.229:47375/i","pattern":"[url:value = 'http://182.116.88.229:47375/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22fcbe90-22ce-5023-137b-0000c728c07d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.e5500","pattern":"[url:value = 'http://130.12.182.77/main.e5500']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e73b905-ac52-d8bd-c41d-00000eb6b23c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.mips32","pattern":"[url:value = 'http://130.12.182.77/main.mips32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--320a0fe7-1336-ddcb-9e07-00003f967668","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.mips64r6el-n32","pattern":"[url:value = 'http://130.12.182.77/main.mips64r6el-n32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26044ea8-3fb3-cbaa-1f88-00004a8aefc2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.m68k-68xxx","pattern":"[url:value = 'http://130.12.182.77/main.m68k-68xxx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc9f2ce9-3a5a-d559-66b0-00000bc44b36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.mips64-n32","pattern":"[url:value = 'http://130.12.182.77/main.mips64-n32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fe79f59-8105-3c56-bada-00005facb1c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.151.217.170:55986/i","pattern":"[url:value = 'http://175.151.217.170:55986/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84c91903-f9fd-5888-297b-00008f88287f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.sparcv8","pattern":"[url:value = 'http://130.12.182.77/main.sparcv8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2b02dc1-32e5-f695-31da-00008f505008","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.power8","pattern":"[url:value = 'http://130.12.182.77/main.power8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3049117e-bef0-ac4d-2498-0000f6c0dae0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.e6500","pattern":"[url:value = 'http://130.12.182.77/main.e6500']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--098bbba0-9014-226a-c5b8-00005055351c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.ppc440fp","pattern":"[url:value = 'http://130.12.182.77/main.ppc440fp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80a7107e-bf15-9f5e-d48d-0000a869246e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.mips32r5el","pattern":"[url:value = 'http://130.12.182.77/main.mips32r5el']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dc96da0-bb2f-9a7e-d1d8-00001fe5771d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.aarch64be","pattern":"[url:value = 'http://130.12.182.77/main.aarch64be']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eecadcf8-302a-3cdd-080b-0000199dc695","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.x86-64-v4","pattern":"[url:value = 'http://130.12.182.77/main.x86-64-v4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba9983dc-a523-2427-75ea-0000e9986928","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.x86-64-i7","pattern":"[url:value = 'http://130.12.182.77/main.x86-64-i7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2277ab49-c93e-2846-af7f-000008af727e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.power8le","pattern":"[url:value = 'http://130.12.182.77/main.power8le']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70ae495b-a133-b1e0-6a60-0000844afe2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.x86-64-v3","pattern":"[url:value = 'http://130.12.182.77/main.x86-64-v3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8caae28f-872c-28e9-f07a-00004454c207","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.mips64el-n32","pattern":"[url:value = 'http://130.12.182.77/main.mips64el-n32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1452997d-56f1-92e6-1d91-00008db9bf32","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.x86-64","pattern":"[url:value = 'http://130.12.182.77/main.x86-64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed5999ca-d905-e280-45b9-0000da7a8ed6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.x86-core2","pattern":"[url:value = 'http://130.12.182.77/main.x86-core2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82e1ae27-237d-b8b9-9911-00002efd56c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.mips32r6el","pattern":"[url:value = 'http://130.12.182.77/main.mips32r6el']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a979cd-fa33-e2cd-6996-00003cf69949","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.x86-64-v2","pattern":"[url:value = 'http://130.12.182.77/main.x86-64-v2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--992ab3a8-d85d-c3f9-fe87-0000374e7d42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.s390x","pattern":"[url:value = 'http://130.12.182.77/main.s390x']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a54c80e-5c10-a34c-fc79-000091cda015","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.x86-i686","pattern":"[url:value = 'http://130.12.182.77/main.x86-i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce5f63be-6828-e549-0e52-00008eb2e27b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.e500mc","pattern":"[url:value = 'http://130.12.182.77/main.e500mc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8691e00c-bbfd-a4a8-c7ea-0000241aec72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.sh4aeb","pattern":"[url:value = 'http://130.12.182.77/main.sh4aeb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0404546d-d459-b99f-3c4b-00006dc34190","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/f","pattern":"[url:value = 'http://130.12.182.77/f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d061a2d-220c-7a44-f137-00009dadcf8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.sparc64","pattern":"[url:value = 'http://130.12.182.77/main.sparc64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a1f20ed-683a-2be2-90ea-00004dc02f90","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.sh4musl","pattern":"[url:value = 'http://130.12.182.77/main.sh4musl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d55cbdad-f29c-85d3-485d-000016604662","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.68.239:60182/i","pattern":"[url:value = 'http://196.189.68.239:60182/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e025c85-1c90-c588-38da-0000eb88efbf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.150.75:33073/bin.sh","pattern":"[url:value = 'http://115.63.150.75:33073/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4d565b6-5193-0104-9aee-0000db967e01","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.150.75:33073/i","pattern":"[url:value = 'http://115.63.150.75:33073/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6987bb59-e186-fee4-7fee-0000e3f63108","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.142.223.175:57022/i","pattern":"[url:value = 'http://222.142.223.175:57022/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5961a06a-df1f-73fe-b326-00002584e626","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.94.125.230:34268/i","pattern":"[url:value = 'http://124.94.125.230:34268/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16904ecc-926c-8eda-afd1-0000f236db53","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.4.234.31:58798/i","pattern":"[url:value = 'http://123.4.234.31:58798/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ee54e51-149a-acbd-c653-00002792756b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.186.140.157:48423/bin.sh","pattern":"[url:value = 'http://105.186.140.157:48423/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4730c387-b4e1-1e2e-126e-0000d602fccd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.194.160:36981/i","pattern":"[url:value = 'http://120.28.194.160:36981/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9bf6219-1a0a-0334-c910-0000eb947ac0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.4.234.246:46289/i","pattern":"[url:value = 'http://123.4.234.246:46289/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97b69ce9-0dbf-d750-32b7-0000adb37db9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.107.216:46123/bin.sh","pattern":"[url:value = 'http://125.43.107.216:46123/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea315355-0785-a826-7af0-00005e49a7b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.186.140.157:48423/i","pattern":"[url:value = 'http://105.186.140.157:48423/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--551a6d3e-5f48-b3d2-0c8b-0000f7b261f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.107.216:46123/i","pattern":"[url:value = 'http://125.43.107.216:46123/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--962d0e14-bd59-0adf-0297-000034053f6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.0.49:47371/i","pattern":"[url:value = 'http://125.43.0.49:47371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee49def8-cca8-79e9-ce6a-00005f1a768d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.186.208.189:49406/bin.sh","pattern":"[url:value = 'http://119.186.208.189:49406/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef1b005f-48b9-7a05-babc-000019f3e520","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_mipsel","pattern":"[url:value = 'http://94.183.233.225/data_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1472d27d-eaca-4331-09f9-0000a55a0934","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_mips","pattern":"[url:value = 'http://94.183.233.225/data_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcb7d455-e17e-5955-6f3f-00002e508f7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.40.241:54434/bin.sh","pattern":"[url:value = 'http://123.8.40.241:54434/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a16ab62-c279-4f95-4a3f-000006028ac9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_x86","pattern":"[url:value = 'http://94.183.233.225/data_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5903997b-e2d3-015b-8507-00009558a2af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_arm4","pattern":"[url:value = 'http://94.183.233.225/data_arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--159eaae2-a4ec-2e93-0a00-00001d4fab55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_powerpc","pattern":"[url:value = 'http://94.183.233.225/data_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c27d1a38-213c-cd2d-335b-00004097061e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_x86_64","pattern":"[url:value = 'http://94.183.233.225/data_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b70df857-014c-1dfe-fd0a-00003f516a24","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_arm6","pattern":"[url:value = 'http://94.183.233.225/data_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e04a9ed-b29a-9151-575e-00002de4c5ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_arm5","pattern":"[url:value = 'http://94.183.233.225/data_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c00ac8c1-5115-abd0-74b0-000087ed0d41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_arm7","pattern":"[url:value = 'http://94.183.233.225/data_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0260513f-af20-a3fa-37cd-00003553ea4c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.40.241:54434/i","pattern":"[url:value = 'http://123.8.40.241:54434/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d696c51a-63e2-43db-b0a3-00004a2676a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.67.222:54368/i","pattern":"[url:value = 'http://115.56.67.222:54368/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--489fc370-4625-6428-03d0-000020e027ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.10.128:38226/i","pattern":"[url:value = 'http://219.157.10.128:38226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c26285b0-e471-abd1-00f0-0000d460d706","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.186.208.189:49406/i","pattern":"[url:value = 'http://119.186.208.189:49406/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cef7605b-0a0d-8a79-afef-0000d2bb8829","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.213.80:37473/bin.sh","pattern":"[url:value = 'http://182.126.213.80:37473/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9af0f546-d833-ca6c-7070-0000541753a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.213.80:37473/i","pattern":"[url:value = 'http://182.126.213.80:37473/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--608dd15b-a565-7711-4cfd-00009fb58f5c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.6.165.86:44671/bin.sh","pattern":"[url:value = 'http://124.6.165.86:44671/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da818090-2128-073b-5d1f-0000a859d679","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.234.239.227:55577/bin.sh","pattern":"[url:value = 'http://124.234.239.227:55577/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b384ca8-615c-abd9-7a83-000057d3f1da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.7.68:35582/i","pattern":"[url:value = 'http://61.52.7.68:35582/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15af8391-97e6-1db5-3139-00005e60e28d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.6.165.86:44671/i","pattern":"[url:value = 'http://124.6.165.86:44671/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da311577-877b-7448-aad8-0000c3a3dd8f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.109.140.49:40757/i","pattern":"[url:value = 'http://119.109.140.49:40757/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e43a256-1f27-a27f-090a-0000efa3d9a3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.234.239.227:55577/i","pattern":"[url:value = 'http://124.234.239.227:55577/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--292cd8b9-4d60-e852-262e-000045c0a3ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://178.16.54.109/molakc","pattern":"[url:value = 'http://178.16.54.109/molakc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a98c6c7-7b8f-493e-5d0e-000003e2ae5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.115.143:48808/i","pattern":"[url:value = 'http://182.116.115.143:48808/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9251e248-0943-417c-02fc-0000fadb6948","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.2.97:36675/bin.sh","pattern":"[url:value = 'http://182.113.2.97:36675/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87f89076-cd4a-0320-077d-0000662da1ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.2.97:36675/i","pattern":"[url:value = 'http://182.113.2.97:36675/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af81952c-fdd0-3863-dccf-000053a8376c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.42.114:53571/bin.sh","pattern":"[url:value = 'http://115.56.42.114:53571/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e308fde-c2e0-f4ab-b81a-0000e9a3e9b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.42.114:53571/i","pattern":"[url:value = 'http://115.56.42.114:53571/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11778cd6-1f5c-a0c5-ed24-000024253fe5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.163.9:60317/bin.sh","pattern":"[url:value = 'http://115.48.163.9:60317/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a44f7615-083e-c1dd-d675-0000719da6e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.mediafire.com/file/rew3rtghymrag7y/file","pattern":"[url:value = 'https://www.mediafire.com/file/rew3rtghymrag7y/file']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc6b07a4-1623-9ce8-4f74-0000bf269eb9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_5ebfecdc25724f43.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_5ebfecdc25724f43.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd5d7c6e-bba7-1fd5-5249-0000206fb8ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.252.178.228/update1.zip","pattern":"[url:value = 'http://192.252.178.228/update1.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f81e0ca-daf6-1a0a-7c99-0000ac8f16fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://199.217.99.6/Troubleshoot.ps1","pattern":"[url:value = 'http://199.217.99.6/Troubleshoot.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b853ca9d-3446-41e0-4671-0000c2ca513f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.mips64","pattern":"[url:value = 'http://92.5.66.49:8080/bot.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d41335f5-6875-77e1-a205-000061f67729","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.arm64","pattern":"[url:value = 'http://92.5.66.49:8080/bot.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9602e5b-5e0b-d08d-d3ba-0000d22aec32","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.ppc64le","pattern":"[url:value = 'http://92.5.66.49:8080/bot.ppc64le']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a17c429-c344-0e97-5668-0000efafaf46","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.mips64le","pattern":"[url:value = 'http://92.5.66.49:8080/bot.mips64le']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e3cb5d9-aa72-289f-550e-0000c0f36df5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.386","pattern":"[url:value = 'http://92.5.66.49:8080/bot.386']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04104d5b-46af-f64d-952d-0000ccffa5d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.mips","pattern":"[url:value = 'http://92.5.66.49:8080/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9338921-4343-6974-28f8-000098682bd4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.riscv64","pattern":"[url:value = 'http://92.5.66.49:8080/bot.riscv64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29046e46-de11-0730-a351-00007c7236c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.ppc64","pattern":"[url:value = 'http://92.5.66.49:8080/bot.ppc64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e46b1e21-6a2c-d463-e196-0000c3d8ee92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.mipsle","pattern":"[url:value = 'http://92.5.66.49:8080/bot.mipsle']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--072b60f4-aa3f-ec20-5d6e-00008ffa0c42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.arm","pattern":"[url:value = 'http://92.5.66.49:8080/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af1ee21e-de5b-516a-409f-000074896776","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.s390x","pattern":"[url:value = 'http://92.5.66.49:8080/bot.s390x']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c359a16-953a-1a7c-b743-000031c03c93","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_38244c706786dad7.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_38244c706786dad7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be8b3b4a-6963-9de2-59e0-0000cfa3f896","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_bec865d8acfd0630.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_bec865d8acfd0630.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2199de09-8107-8242-b9c3-00006dcfbd71","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.226.18:57698/Mozi.a","pattern":"[url:value = 'http://221.15.226.18:57698/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3b849b3-f793-e5b5-2d04-0000d76fcac6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.amd64","pattern":"[url:value = 'http://92.5.66.49:8080/bot.amd64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f73bc9a6-5d3a-8a2e-4275-000082b0e1a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.163.9:60317/i","pattern":"[url:value = 'http://115.48.163.9:60317/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e834f52-87ed-7b3a-768c-0000981e3e6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.207.175:45931/bin.sh","pattern":"[url:value = 'http://123.11.207.175:45931/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de246fbe-8055-177c-ea50-0000e5d005d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/willy/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/willy/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18332b81-9982-6e3e-e5e6-0000dd21a87e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e55fd5","pattern":"[url:value = 'http://5.182.210.174/e55fd5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10179294-1ee4-e3ea-4bb0-0000cec838cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/xkw","pattern":"[url:value = 'http://129.121.110.105/xkw']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d118c4f7-0c66-cffb-2c00-0000f807aa36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/759f0d","pattern":"[url:value = 'http://5.182.210.174/759f0d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fef0dc74-3729-dc32-4ab1-000037befdd3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/Y3P","pattern":"[url:value = 'http://129.121.110.105/Y3P']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b947860e-dafc-3715-ec29-00007b8983e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/2NXl","pattern":"[url:value = 'http://129.121.110.105/2NXl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5fa6eca-70cc-5f04-5d2c-0000ce580be6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f4f193","pattern":"[url:value = 'http://5.182.210.174/f4f193']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0469762f-75b3-bdb3-aa8a-00008a6c43fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/783f2a","pattern":"[url:value = 'http://5.182.210.174/783f2a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28e3b52d-9fbc-7893-c33a-00006452790a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/99764f","pattern":"[url:value = 'http://5.182.210.174/99764f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56ddad4e-769c-3653-ce26-00006db989ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0eaa32","pattern":"[url:value = 'http://5.182.210.174/0eaa32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0c38ad1-2e7b-06c0-4f8d-0000bb3cf9a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/yx2w","pattern":"[url:value = 'http://129.121.110.105/yx2w']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f144b20-1de7-6442-582c-0000c56c41e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/19e860","pattern":"[url:value = 'http://5.182.210.174/19e860']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--597f1472-7cf7-7506-7a9b-00004d174231","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/lWC","pattern":"[url:value = 'http://129.121.110.105/lWC']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e4990e8-382a-195e-fb08-00002dc6b7f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/Wqm","pattern":"[url:value = 'http://129.121.110.105/Wqm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c67d809d-494d-8929-96da-0000148afb01","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d6c209","pattern":"[url:value = 'http://5.182.210.174/d6c209']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a6c589f-32c8-1a22-6886-0000345f4046","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/747c0d","pattern":"[url:value = 'http://5.182.210.174/747c0d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--767a3800-1801-e090-5d4a-000053396101","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/fXd","pattern":"[url:value = 'http://129.121.110.105/fXd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--231b461e-fecc-854e-5041-0000ce88ea98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f39a8e","pattern":"[url:value = 'http://5.182.210.174/f39a8e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56b02cc0-cd45-d499-67db-000097890b9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/704581","pattern":"[url:value = 'http://5.182.210.174/704581']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29cf242b-964e-b4ae-5956-00003a5dd201","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ef363f","pattern":"[url:value = 'http://5.182.210.174/ef363f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a365d07c-62a0-7a4d-9aec-0000157d84f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/575708","pattern":"[url:value = 'http://5.182.210.174/575708']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f78156e6-6d6c-82f2-5bb3-00002f47a02f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cd049e","pattern":"[url:value = 'http://5.182.210.174/cd049e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc6244e8-fc8e-21b1-e160-0000642e4e0f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f91198","pattern":"[url:value = 'http://5.182.210.174/f91198']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbe1a35f-8a6a-be4b-2738-0000c1b1113c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/rG3i","pattern":"[url:value = 'http://129.121.110.105/rG3i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95a090cb-9817-4f27-dbfb-0000ce1b1568","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6cf53f","pattern":"[url:value = 'http://5.182.210.174/6cf53f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c64ec990-4617-ed83-c248-00008239fd08","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/RzWf","pattern":"[url:value = 'http://129.121.110.105/RzWf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f236bbf-b26a-5f1f-7d47-00001e1a3fd2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f818ff","pattern":"[url:value = 'http://5.182.210.174/f818ff']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1a6e08c-f1a4-97b3-3fc5-00007d9252ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/7uv8","pattern":"[url:value = 'http://129.121.110.105/7uv8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ced9603f-8cda-df8a-1655-000041b3e61a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/xl01","pattern":"[url:value = 'http://129.121.110.105/xl01']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d2d8e20-cc6b-b4c4-78ae-00002ce4ea73","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e8e811","pattern":"[url:value = 'http://5.182.210.174/e8e811']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e159841-f344-01a8-b946-0000516b468e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3b0256","pattern":"[url:value = 'http://5.182.210.174/3b0256']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3df249d2-2b9d-d464-3cec-00000873c3b1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a5b334","pattern":"[url:value = 'http://5.182.210.174/a5b334']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfa1c95d-3e67-283f-b8b6-00002bfb078b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/04e832","pattern":"[url:value = 'http://5.182.210.174/04e832']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58e55471-1384-fcf8-eed1-0000aff2c936","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/C1iC","pattern":"[url:value = 'http://129.121.110.105/C1iC']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad177a19-498d-2dca-c945-0000b182c947","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/4vqU","pattern":"[url:value = 'http://129.121.110.105/4vqU']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--848f2744-130e-251d-92c4-000024274ce2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/4yKQ","pattern":"[url:value = 'http://129.121.110.105/4yKQ']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00b6dc14-7abb-c36e-8c37-0000e0d6d2a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/8a320b","pattern":"[url:value = 'http://5.182.210.174/8a320b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2f8686f-7fe7-9cc1-e0e7-0000a9bf5280","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/ot7","pattern":"[url:value = 'http://129.121.110.105/ot7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8b074e0-8b0c-39db-73ae-0000dda69ad8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/21a9d4","pattern":"[url:value = 'http://5.182.210.174/21a9d4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d78c006-6081-943a-d951-000065df1701","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/44e32f","pattern":"[url:value = 'http://5.182.210.174/44e32f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ef4187c-3ec0-8236-da8f-000091567ab8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://quick-load.vercel.app/api/settings/bootstraplinux","pattern":"[url:value = 'https://quick-load.vercel.app/api/settings/bootstraplinux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--842265f6-a7b4-2e64-5e1d-000088d5944e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cc8b91","pattern":"[url:value = 'http://5.182.210.174/cc8b91']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25058f6e-c25b-f070-8edd-00007a4ed3aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/80b16f","pattern":"[url:value = 'http://5.182.210.174/80b16f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeafc524-9b1c-bfd0-3652-00003bd6364e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/82c703","pattern":"[url:value = 'http://5.182.210.174/82c703']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2303af9-a863-c968-dee0-00004d13e386","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/924208","pattern":"[url:value = 'http://5.182.210.174/924208']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c8d5afe-a2ac-7ccd-105d-00009871516b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2ca244","pattern":"[url:value = 'http://5.182.210.174/2ca244']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c3a833f-bf09-5d19-9345-00000de3f575","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7215c9","pattern":"[url:value = 'http://5.182.210.174/7215c9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86263e16-26df-71b9-c24e-00007f15046a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/fd89ab","pattern":"[url:value = 'http://5.182.210.174/fd89ab']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5ebece3-21c7-b60e-7ee2-00009ac1ac92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/fb21f1","pattern":"[url:value = 'http://5.182.210.174/fb21f1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d54d1ab-c5ae-bef9-c6fb-0000d57e96f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/690e95","pattern":"[url:value = 'http://5.182.210.174/690e95']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e284dc10-e654-9d1b-99a8-00002f082b16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/32441c","pattern":"[url:value = 'http://5.182.210.174/32441c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60efa7f1-1ac3-9a04-e3b1-0000918389ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/22393a","pattern":"[url:value = 'http://5.182.210.174/22393a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--985b24d5-e71d-4c9d-e81a-00007265db37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/eb5263","pattern":"[url:value = 'http://5.182.210.174/eb5263']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b13d90b-8f3b-bb9a-973c-00002c67954c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.243.228.138:53440/bin.sh","pattern":"[url:value = 'http://42.243.228.138:53440/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--816a97a0-487e-ad06-519c-0000be698cd4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://114.227.48.185:58022/bin.sh","pattern":"[url:value = 'http://114.227.48.185:58022/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28183dcb-e42a-f751-ef7b-00001008eccf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/fold/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/fold/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d83cda1-df65-8bc6-7a98-00002629090d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/onekey/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/onekey/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a9ad4f-15f9-4d39-d3ad-00003b1356bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/bullbitcoin/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/bullbitcoin/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a211c1f-54cd-339a-0b99-00004912ec9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://citrusmangos.ct.ws/img_112634.png","pattern":"[url:value = 'https://citrusmangos.ct.ws/img_112634.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff3c6733-62ae-81c9-7856-0000d7889f7f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://muddy-sound-e0cd.nodetectonn.workers.dev/pufcw","pattern":"[url:value = 'https://muddy-sound-e0cd.nodetectonn.workers.dev/pufcw']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84e988b3-c1dd-c27e-b7ce-000019e24dfc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/Swan/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/Swan/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--428f67c5-fabd-5c98-b27e-000034a97296","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.47.8/quis.exe","pattern":"[url:value = 'http://91.92.47.8/quis.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42e56624-e467-4de7-4220-000028f57106","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.47.8/CW.exe","pattern":"[url:value = 'http://91.92.47.8/CW.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d340a48-1e71-ef85-b64e-000051a48594","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.235.197.3:57427/bin.sh","pattern":"[url:value = 'http://221.235.197.3:57427/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9fbfacb-b422-7fbc-a129-0000adb01e15","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/COLDCARD/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/COLDCARD/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f261eba8-8004-93ec-20ff-0000a422326d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/casa/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/casa/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ebba93d-822e-871b-af10-0000fbb35ee7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.226.79.201:45777/i","pattern":"[url:value = 'http://42.226.79.201:45777/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3dfeabe-762e-eb57-1a68-0000894b4244","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/Wasabi/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/Wasabi/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19855277-4f51-9656-5d92-0000b097731b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/Sparrow/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/Sparrow/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--219915ba-0387-aab7-68d6-000082d9f3bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/River/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/River/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c3d6b69-cace-5c10-fd98-00006d114b60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/Relai/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/Relai/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4daec17a-9fab-61b7-48fe-00004e9fc085","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.235.197.3:57427/i","pattern":"[url:value = 'http://221.235.197.3:57427/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--962fbe47-dc06-cfa6-1484-000050346012","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/dcent/releases/download/1.1/DcentInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/dcent/releases/download/1.1/DcentInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08d22fcd-f974-d81e-d2aa-000017c0cb20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.204.212:38964/bin.sh","pattern":"[url:value = 'http://221.15.204.212:38964/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c64cfef-394a-823c-9fc2-00005075bc7f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/ellipal/releases/download/1.1/EllipalInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/ellipal/releases/download/1.1/EllipalInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7524844-d062-60c5-933c-00003e2095c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/Pocket/releases/download/1.1/YouTrustInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/Pocket/releases/download/1.1/YouTrustInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59153ed6-4075-950d-0c2b-0000516af3e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/SecondFi/releases/download/1.1/SecondFiInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/SecondFi/releases/download/1.1/SecondFiInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f590799f-a05a-2e31-da55-00000ccbeb6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/KnakenDocu/releases/download/1.1/InstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/KnakenDocu/releases/download/1.1/InstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d210b2e-774e-08a8-1244-00006938e79c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.185.120:41148/i","pattern":"[url:value = 'http://115.63.185.120:41148/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05fc112d-dc26-fd77-79b5-000023310d3f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.106.148:49825/i","pattern":"[url:value = 'http://110.37.106.148:49825/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77246e53-2160-f7c4-9c2c-00005df177c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/WebAuth/releases/download/1.1/WebAuthInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/WebAuth/releases/download/1.1/WebAuthInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f6a86a9-83d5-a2df-834a-0000e2619495","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.82.34:58954/i","pattern":"[url:value = 'http://42.237.82.34:58954/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bf0210a-b3b3-246b-65e6-0000c8c327dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.82.34:58954/bin.sh","pattern":"[url:value = 'http://42.237.82.34:58954/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64455cc3-06b8-c3c3-bcaa-00007727ca94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2c7a26","pattern":"[url:value = 'http://5.182.210.174/2c7a26']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e50b032a-f31c-d780-f8b7-00007d530c36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1a59ff","pattern":"[url:value = 'http://5.182.210.174/1a59ff']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12433559-02d7-7696-254e-0000daff821f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/155a79","pattern":"[url:value = 'http://5.182.210.174/155a79']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f65065a-da3a-1ea6-1c87-0000fedfdc86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/35c40c","pattern":"[url:value = 'http://5.182.210.174/35c40c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d759de5-a2c8-aca9-e052-0000bfdf262c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b136a3","pattern":"[url:value = 'http://5.182.210.174/b136a3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee6ca626-b8b8-1b8f-be3d-000074ef490e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2419f5","pattern":"[url:value = 'http://5.182.210.174/2419f5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64f5a66b-3ae9-ed2c-f2a9-0000857e7cf7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/07aedd","pattern":"[url:value = 'http://5.182.210.174/07aedd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85851043-cea9-32d6-fe5f-000051ba134c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b63d70","pattern":"[url:value = 'http://5.182.210.174/b63d70']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d32951ab-02ec-267d-ed34-0000c0490385","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/60689f","pattern":"[url:value = 'http://5.182.210.174/60689f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09991385-9231-d0af-8116-0000fbb4f6be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d77667","pattern":"[url:value = 'http://5.182.210.174/d77667']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fe113ad-4fce-b315-bc9c-0000933418be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0c3474","pattern":"[url:value = 'http://5.182.210.174/0c3474']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ec6806e-2a33-26b4-e2ad-0000ffbb5c04","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/4a4b8b","pattern":"[url:value = 'http://5.182.210.174/4a4b8b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5ea3f9e-6a7f-25f9-1c33-00001bfaf1db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.204.212:38964/i","pattern":"[url:value = 'http://221.15.204.212:38964/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--502fcb55-261c-f16b-871a-00001dde9a79","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.207.175:45931/i","pattern":"[url:value = 'http://123.11.207.175:45931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0589fdc-1612-9520-883c-0000e38cc619","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.22.108:50309/i","pattern":"[url:value = 'http://123.12.22.108:50309/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8a804d4-8f38-2ed5-4ec4-0000c2973624","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.205.38:37725/bin.sh","pattern":"[url:value = 'http://182.113.205.38:37725/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13a6af18-bf7a-b661-7086-0000f069118e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.243.24:39493/bin.sh","pattern":"[url:value = 'http://182.114.243.24:39493/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3feef34-82e0-15ba-c5d7-000054f73819","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.243.24:39493/i","pattern":"[url:value = 'http://182.114.243.24:39493/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--225ba1e5-cad3-16c3-6ffb-000010fa5213","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.190.70:45710/bin.sh","pattern":"[url:value = 'http://112.248.190.70:45710/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5de13ddc-b1d6-13e9-04a0-0000cd0013f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.10.99:56358/bin.sh","pattern":"[url:value = 'http://123.11.10.99:56358/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05fd9874-9781-b696-1373-0000dd1a0b94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.190.70:45710/i","pattern":"[url:value = 'http://112.248.190.70:45710/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56fa0db6-6427-ffb0-a95b-0000dd63a215","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.122.195.212:57996/bin.sh","pattern":"[url:value = 'http://182.122.195.212:57996/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07ba0179-4801-0403-a6ad-00009df97da5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.83.209:57935/bin.sh","pattern":"[url:value = 'http://123.5.83.209:57935/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6870ffd3-8985-dbc8-2b0b-0000b89842e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.25.235.194:33174/i","pattern":"[url:value = 'http://112.25.235.194:33174/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27ae65fb-01e1-76fc-14b1-00006403c8b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://108.168.0.60:36003/i","pattern":"[url:value = 'http://108.168.0.60:36003/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ed06863-71e2-c1b7-7282-000095100332","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.10.146.56:33546/bin.sh","pattern":"[url:value = 'http://123.10.146.56:33546/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--170aa561-f6ba-c12c-7ff5-00008ec6451c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.58.92:44731/bin.sh","pattern":"[url:value = 'http://110.37.58.92:44731/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cb2d97a-1d20-9d45-9912-0000d88504b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://147.182.224.216/zedx","pattern":"[url:value = 'http://147.182.224.216/zedx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fd97d33-25b1-85d7-3ec0-0000b7c57383","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.228.117.193:35892/i","pattern":"[url:value = 'http://113.228.117.193:35892/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--643c5870-f17e-a086-5fd6-0000fd8a8641","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.26:48412/bin.sh","pattern":"[url:value = 'http://210.208.111.26:48412/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d61dfe5-2751-ad56-abe6-0000674adf66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.48.123.149:50607/i","pattern":"[url:value = 'http://144.48.123.149:50607/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2484efb9-dbdc-5db1-9443-00000dca280f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.173.12.38:48285/bin.sh","pattern":"[url:value = 'http://31.173.12.38:48285/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aab5a5e2-43e4-8f3d-004d-0000366b4e65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.207.139.137:59758/bin.sh","pattern":"[url:value = 'http://27.207.139.137:59758/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c543583a-4c1b-a13b-8bda-0000403de25b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://159.255.7.120:59678/i","pattern":"[url:value = 'http://159.255.7.120:59678/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--485fb8a8-bb03-426f-0d6e-0000f4d521eb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.206.197.243:58204/bin.sh","pattern":"[url:value = 'http://27.206.197.243:58204/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f280d46-9f0b-38e9-467b-0000007a62e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://190.109.228.177:37896/i","pattern":"[url:value = 'http://190.109.228.177:37896/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c9298b1-87e7-5220-52f2-0000977323df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.225.206.253:49336/i","pattern":"[url:value = 'http://42.225.206.253:49336/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd702ff-3b12-0dda-9912-0000606f544b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.193.230:59136/i","pattern":"[url:value = 'http://219.155.193.230:59136/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ed10f80-cf2b-c037-87a7-0000630fa08d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.214.25:37703/bin.sh","pattern":"[url:value = 'http://119.179.214.25:37703/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ac17854-b244-bdbd-a7f7-00009446c220","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.132.158:59339/i","pattern":"[url:value = 'http://115.48.132.158:59339/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a4f99e6-500f-7707-7aac-00001ff984a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.57.199.157:51293/i","pattern":"[url:value = 'http://115.57.199.157:51293/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adfe7d40-930a-4923-cfda-000044781063","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.9.81:37641/i","pattern":"[url:value = 'http://182.117.9.81:37641/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eff368be-ffb4-03b5-4c1e-0000b226d452","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://216.249.4.20:36657/i","pattern":"[url:value = 'http://216.249.4.20:36657/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b67ccad3-126e-f996-bbf3-0000131fcca2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.225.205:41540/bin.sh","pattern":"[url:value = 'http://123.12.225.205:41540/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ed1b394-3003-f98e-543c-000030504a85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.236.158:50588/bin.sh","pattern":"[url:value = 'http://119.179.236.158:50588/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad69af17-29ee-c91e-f5c6-0000f0ee892c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.54.13:58614/bin.sh","pattern":"[url:value = 'http://123.14.54.13:58614/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88b92de8-a46f-b169-8fb9-0000c11095f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.110.46.203:54807/bin.sh","pattern":"[url:value = 'http://125.110.46.203:54807/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--815c508a-9e33-4b83-75a2-0000c0b29bf2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.92.34:34684/i","pattern":"[url:value = 'http://61.53.92.34:34684/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--025b1293-d643-2e07-e22e-00008f6ebbaa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.212.236:37136/i","pattern":"[url:value = 'http://182.113.212.236:37136/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcbb3c34-e16f-59e4-fc56-0000f8541be5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.70.209:50318/i","pattern":"[url:value = 'http://182.116.70.209:50318/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96ec639b-246d-2948-b8da-0000e25c841e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.4:37718/i","pattern":"[url:value = 'http://210.208.110.4:37718/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--969296fb-de3d-a3a3-f350-000074fd06fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.4.237:59213/i","pattern":"[url:value = 'http://221.15.4.237:59213/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--845e1b1b-9615-bcae-33ca-0000c1e0bed2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.10.238.107:36973/bin.sh","pattern":"[url:value = 'http://123.10.238.107:36973/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70e17954-9240-f6e7-b050-0000b633d3e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.41.232:60566/i","pattern":"[url:value = 'http://42.235.41.232:60566/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e3070d3-a0fc-703f-027d-0000725f8703","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.4:37718/bin.sh","pattern":"[url:value = 'http://210.208.110.4:37718/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d483b45-7ec4-4ee5-a8ef-0000c6922c02","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.59.38.151:38535/i","pattern":"[url:value = 'http://115.59.38.151:38535/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1bfa2b2-88f9-dbe9-f26e-0000f5431f07","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.96.94:38510/i","pattern":"[url:value = 'http://123.9.96.94:38510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c2c0c2a-3052-941a-ecad-00005fc1a53b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.68.42:46437/i","pattern":"[url:value = 'http://123.11.68.42:46437/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--914b72e1-436e-657d-5b9d-0000a0517cc4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.26.202.172:59746/i","pattern":"[url:value = 'http://125.26.202.172:59746/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dbd2c0b-1452-7d69-3548-000074c20ead","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.183.1:55955/i","pattern":"[url:value = 'http://182.119.183.1:55955/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c84e6e09-f55d-8667-c1b0-000091bd5457","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.134.172.2:44618/i","pattern":"[url:value = 'http://222.134.172.2:44618/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56719105-d98b-fa30-facd-0000bde57de2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.89.70:45805/i","pattern":"[url:value = 'http://110.37.89.70:45805/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61a4c85b-3210-26e6-7258-00004607be29","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.46.212.105:46118/i","pattern":"[url:value = 'http://125.46.212.105:46118/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9207db1f-ff27-301f-6311-00001fa42806","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.168.124:55125/i","pattern":"[url:value = 'http://115.56.168.124:55125/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17dfa324-bdc6-2b27-7e4d-000058748bea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.16.143:54649/i","pattern":"[url:value = 'http://110.36.16.143:54649/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df2f8925-dc8e-d254-e2ac-00008b60df21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.193.230:59136/bin.sh","pattern":"[url:value = 'http://219.155.193.230:59136/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1f3e328-3ff9-865f-9160-000093cf519e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.92.34:34684/bin.sh","pattern":"[url:value = 'http://61.53.92.34:34684/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a8ce6ac-6d87-2e98-14fd-0000c83e7a51","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.166.115.199:56157/bin.sh","pattern":"[url:value = 'http://175.166.115.199:56157/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12a7d93d-d0b6-2c33-8f0e-0000c08d7b62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.104.0:41525/i","pattern":"[url:value = 'http://110.37.104.0:41525/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a07390e-a5f7-c543-207c-00006e087087","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://156.146.24.110:51345/bin.sh","pattern":"[url:value = 'http://156.146.24.110:51345/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed72f272-6c26-2135-1c99-00003b826a52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.50.100:43521/bin.sh","pattern":"[url:value = 'http://42.237.50.100:43521/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edda8851-d89f-3172-b101-00000c54284d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://200.115.102.2:57794/i","pattern":"[url:value = 'http://200.115.102.2:57794/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d69e73ca-2b12-592c-73bf-00007bebc298","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.97.247:34050/i","pattern":"[url:value = 'http://115.63.97.247:34050/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4d059e9-a548-a9be-6fae-0000bfef9a9c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.227.44.180:33342/i","pattern":"[url:value = 'http://42.227.44.180:33342/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f118439-541c-d8a0-f52e-0000ea93e603","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.47.244.3:55442/i","pattern":"[url:value = 'http://125.47.244.3:55442/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d553f7d1-f029-f71b-1b7d-0000d1a26d48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.255.227:42646/i","pattern":"[url:value = 'http://110.39.255.227:42646/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15b209c8-12da-89e4-a586-00009f67ebaa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.47.176:47866/i","pattern":"[url:value = 'http://42.230.47.176:47866/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51c2251f-8e09-f358-ba8b-00007e95d2c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.236.44.113:59714/i","pattern":"[url:value = 'http://109.236.44.113:59714/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b18fc7b1-65a1-734f-044b-0000c9560e00","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.212.157:59656/i","pattern":"[url:value = 'http://219.157.212.157:59656/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3c38611-8a01-1e9c-714d-0000862620dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.9.81:37641/bin.sh","pattern":"[url:value = 'http://182.117.9.81:37641/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5164455d-c863-d116-0621-000057c3e61d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.219.168:39833/i","pattern":"[url:value = 'http://123.14.219.168:39833/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d74fe0b-497d-0094-f528-00002574d334","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.25.58:39112/i","pattern":"[url:value = 'http://110.36.25.58:39112/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffc97d97-035e-b380-0f3a-00007403968b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.173.86.99:35726/i","pattern":"[url:value = 'http://123.173.86.99:35726/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cadea4f-ffa2-2d8a-5361-000083464b2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.79.182:51273/bin.sh","pattern":"[url:value = 'http://123.12.79.182:51273/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa365450-cd5a-0e13-af5c-000089a7667d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.184.49.165:53813/i","pattern":"[url:value = 'http://105.184.49.165:53813/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--967a51f3-b57c-85af-4954-000050847c86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.53.22.56:45156/i","pattern":"[url:value = 'http://42.53.22.56:45156/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7906b6a2-4b13-9150-1c73-0000757660d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.228.117.193:35892/bin.sh","pattern":"[url:value = 'http://113.228.117.193:35892/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94ceb837-b940-28ae-43a1-000085927d28","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.53.22.56:45156/bin.sh","pattern":"[url:value = 'http://42.53.22.56:45156/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c1802fa-8d04-90e8-0830-00006d7f4900","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.236.62:50658/i","pattern":"[url:value = 'http://123.12.236.62:50658/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0ddee67-cd7d-cfd9-ace6-00008171e8b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.119.29:53082/i","pattern":"[url:value = 'http://182.116.119.29:53082/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d28d1e2b-cf0b-c03c-c305-000087262c3f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.250.158.32:40802/bin.sh","pattern":"[url:value = 'http://167.250.158.32:40802/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--432f902b-cb84-f748-bf8f-00001afe5baf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.55.212.26:51890/i","pattern":"[url:value = 'http://42.55.212.26:51890/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56816565-fa4c-8239-5ddd-0000385f6067","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.26.202.172:59746/bin.sh","pattern":"[url:value = 'http://125.26.202.172:59746/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6318f4dd-f6cd-0314-4711-0000129b5f41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.112.39.204:49245/bin.sh","pattern":"[url:value = 'http://182.112.39.204:49245/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bb41100-116c-3216-350e-00006ba311b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.214.25:37703/i","pattern":"[url:value = 'http://119.179.214.25:37703/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f67cc1e-78f9-acd3-c403-00005657a7e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.10.238.107:36973/i","pattern":"[url:value = 'http://123.10.238.107:36973/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d556948-4332-1823-8c2e-000025c1ec3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.62.66:34836/i","pattern":"[url:value = 'http://219.157.62.66:34836/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9adbcd13-d709-e06d-5f56-00008543fa42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.219.185:54557/bin.sh","pattern":"[url:value = 'http://125.44.219.185:54557/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfc63296-7c80-9d1a-2892-0000929fb2d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://123.170.100.105:42942/i","pattern":"[url:value = 'http://123.170.100.105:42942/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0485c44-1f50-caba-edbf-0000edecbbe8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.206.81.19:46242/i","pattern":"[url:value = 'http://27.206.81.19:46242/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e677e667-24a3-0e96-abb6-00007fab2818","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.58.92:44731/i","pattern":"[url:value = 'http://110.37.58.92:44731/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bcd61d6-4bdc-7b8e-acf7-0000e441e8fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.225.205:41540/i","pattern":"[url:value = 'http://123.12.225.205:41540/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84c7a7c4-7895-31c7-e94a-00008696068b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.104.156:36904/bin.sh","pattern":"[url:value = 'http://210.208.104.156:36904/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bade5c0-916a-4900-643f-0000eeb70b89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.186.20:38902/i","pattern":"[url:value = 'http://123.5.186.20:38902/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0feff27-abca-6a01-4949-000000553762","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.140.248/init.sh","pattern":"[url:value = 'http://181.214.140.248/init.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2414b03-fa26-c08f-9662-0000e4661ced","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.236.44.113:59714/bin.sh","pattern":"[url:value = 'http://109.236.44.113:59714/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67266c3c-c65b-2b02-e13a-0000c242f86b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.197.132.72:52016/i","pattern":"[url:value = 'http://115.197.132.72:52016/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d27dc67f-2fd9-30c8-2d74-000018cf1758","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.35.172:53074/i","pattern":"[url:value = 'http://196.189.35.172:53074/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eab0afea-66a2-ccbb-5160-0000b2fd0398","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.119.29:53082/bin.sh","pattern":"[url:value = 'http://182.116.119.29:53082/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19fcdc67-e15b-9919-8ee6-00002068ac36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.179.152.19:54189/bin.sh","pattern":"[url:value = 'http://42.179.152.19:54189/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db877bde-d2ab-ef8b-e656-0000cc76ebf1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.219.185:54557/i","pattern":"[url:value = 'http://125.44.219.185:54557/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d63ffde-0057-814e-c8fa-000034fe9009","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.61.120.117:43905/bin.sh","pattern":"[url:value = 'http://115.61.120.117:43905/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86079bd7-2b1c-dfac-d460-00007061a0ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.171.191:59435/bin.sh","pattern":"[url:value = 'http://115.58.171.191:59435/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0542f0a0-9899-6908-a9ca-0000a160d9ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.26.227.227:59859/bin.sh","pattern":"[url:value = 'http://117.26.227.227:59859/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a296e389-407d-db0e-4a19-000076adf35d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.33.96:58607/i","pattern":"[url:value = 'http://182.119.33.96:58607/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cc3840a-0c91-3440-2f8a-0000a4630e71","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.148.201.94:60468/bin.sh","pattern":"[url:value = 'http://175.148.201.94:60468/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d988d79-d5f2-b540-e922-0000dfafeb1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.29.63:58773/i","pattern":"[url:value = 'http://42.230.29.63:58773/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e14d8e8-2060-2eed-4609-000000bc5f82","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.124.165:52379/i","pattern":"[url:value = 'http://123.5.124.165:52379/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--321c5a4c-af69-516e-8eba-0000d9a3d8a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.42:42743/i","pattern":"[url:value = 'http://210.208.110.42:42743/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88fdf1dc-877f-6928-cd30-0000be4ed72f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.60.215:54523/i","pattern":"[url:value = 'http://42.237.60.215:54523/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbc0283c-2af4-4e46-8ba0-00001f3e35fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.54.182.143:33305/i","pattern":"[url:value = 'http://115.54.182.143:33305/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9953d88f-6301-0c97-456d-0000a59c56d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.110.46.203:54807/i","pattern":"[url:value = 'http://125.110.46.203:54807/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8d5a451-f1e6-3521-80f5-0000a5da5e77","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.4.237:59213/bin.sh","pattern":"[url:value = 'http://221.15.4.237:59213/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95e9ed31-3034-d80a-9ab4-0000e3d91de1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.104.156:36904/i","pattern":"[url:value = 'http://210.208.104.156:36904/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd37fe54-480d-b986-ddc8-0000ad41aa23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.186.20:38902/bin.sh","pattern":"[url:value = 'http://123.5.186.20:38902/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5528690b-cbf8-d3c7-0e22-000079a9d20e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.122.195.212:57996/i","pattern":"[url:value = 'http://182.122.195.212:57996/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--880ff516-3239-a93d-e31e-000015a9928d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.32.46:45304/i","pattern":"[url:value = 'http://42.230.32.46:45304/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a98a6a4-03ee-be3b-0fec-00002c8eb071","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.10.99:56358/i","pattern":"[url:value = 'http://123.11.10.99:56358/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--458fc1c9-a483-11c4-7d11-0000c5ee909a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.171.67.100:36364/i","pattern":"[url:value = 'http://109.171.67.100:36364/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ee4a018-566f-87fa-3e0f-0000ef232d70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.184.49.165:53813/bin.sh","pattern":"[url:value = 'http://105.184.49.165:53813/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61bfe99b-a0fc-ab70-e266-0000d152f466","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.173.86.99:35726/bin.sh","pattern":"[url:value = 'http://123.173.86.99:35726/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e71d9994-7b8c-7b32-1aaa-0000cde908ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://171.83.59.154:46798/Mozi.m","pattern":"[url:value = 'http://171.83.59.154:46798/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--394c1527-555c-d47e-ca85-000081abfe5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.115.183.101:34303/i","pattern":"[url:value = 'http://182.115.183.101:34303/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d836aeb3-a57f-ac82-2dfd-0000cc5001c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.26.227.227:59859/i","pattern":"[url:value = 'http://117.26.227.227:59859/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a37096f1-ee40-55d7-a349-0000376e004a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.14.94:37078/i","pattern":"[url:value = 'http://42.224.14.94:37078/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--062eae7b-106a-c36d-9df9-000040805eb1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.234.128.149:36887/i","pattern":"[url:value = 'http://124.234.128.149:36887/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be8b2c69-0cd5-3151-a7b7-0000f02b84b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.55.138.2:60455/bin.sh","pattern":"[url:value = 'http://42.55.138.2:60455/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc8e452f-9bcd-f596-68f4-0000406951a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.239.97.33:40194/bin.sh","pattern":"[url:value = 'http://112.239.97.33:40194/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a64cc3a8-8fa6-65c7-28b9-0000bca0c0e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.135.245:34017/i","pattern":"[url:value = 'http://120.28.135.245:34017/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51e030cf-59e9-3e11-d915-000011c94009","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.83.209:57935/i","pattern":"[url:value = 'http://123.5.83.209:57935/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e36f456-f5bb-6a6e-6f3b-0000232da6a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-c1aae4eecd22436e835dc3a91e470062.r2.dev/E18D10F2AB43.ps1","pattern":"[url:value = 'https://pub-c1aae4eecd22436e835dc3a91e470062.r2.dev/E18D10F2AB43.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1085830-1fc6-ea5a-995d-0000aca4ffe1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.171.177.193:32861/i","pattern":"[url:value = 'http://45.171.177.193:32861/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94fb391b-4f80-17f6-a2dc-0000c0eeaf85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://223.105.50.190:53132/bin.sh","pattern":"[url:value = 'http://223.105.50.190:53132/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba824e4b-50dc-4a06-2595-0000e5f5a7b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.142.210.206:51525/bin.sh","pattern":"[url:value = 'http://222.142.210.206:51525/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--935a2c9f-7984-e832-25cf-0000b0b669b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_b51b4703e727923f.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_b51b4703e727923f.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b548ba06-589b-501d-290b-000096d6b639","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://kworker.eth.link/ksmd","pattern":"[url:value = 'https://kworker.eth.link/ksmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dc96cf5-26ac-ee4f-2023-00006c89aa57","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.179.119.120/install.sh","pattern":"[url:value = 'http://167.179.119.120/install.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--831bfbc8-191c-705d-99ab-000016e7734f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://69.30.251.156/library/Payment/Adapter/PAYEER/ksmd","pattern":"[url:value = 'https://69.30.251.156/library/Payment/Adapter/PAYEER/ksmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b325dec-398c-e835-fb6a-0000934c1e78","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://216.98.10.60:55555/ksmd","pattern":"[url:value = 'http://216.98.10.60:55555/ksmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f31e28d-4094-1251-1d9b-0000200d5c36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://kworker.eth.limo/ksmd","pattern":"[url:value = 'https://kworker.eth.limo/ksmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4ce0ead-f2e9-0dac-5c04-0000c7894910","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://34.70.205.211/plugins-dist/safehtml/lang/font/ksmd","pattern":"[url:value = 'http://34.70.205.211/plugins-dist/safehtml/lang/font/ksmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc0c8e26-b581-2811-64bd-0000640086ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://223.105.50.190:53132/i","pattern":"[url:value = 'http://223.105.50.190:53132/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--231549e8-4fa5-976e-f666-00001fe1d432","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.247.153:53090/bin.sh","pattern":"[url:value = 'http://182.126.247.153:53090/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f169c919-4573-f475-285e-0000c9d7685b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.142.210.206:51525/i","pattern":"[url:value = 'http://222.142.210.206:51525/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6422b708-e3df-d507-ed15-000084816de9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.197.125:40668/i","pattern":"[url:value = 'http://115.55.197.125:40668/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5856f40-81a0-f77e-7b3c-0000fb5bc85c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.247.153:53090/i","pattern":"[url:value = 'http://182.126.247.153:53090/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70b10113-f9a8-22d0-0241-00004f6beaac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.225.188:60928/bin.sh","pattern":"[url:value = 'http://123.12.225.188:60928/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--110e4f68-df6a-2132-1c76-000022eba1ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.184.45.242:43025/bin.sh","pattern":"[url:value = 'http://105.184.45.242:43025/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49c5a577-7aca-1c97-d6b7-00009db645a1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.184.45.242:43025/i","pattern":"[url:value = 'http://105.184.45.242:43025/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2fc819d-3f78-8da8-00d2-0000972e79c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.225.188:60928/i","pattern":"[url:value = 'http://123.12.225.188:60928/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a47d2b2-38a6-9123-52dd-0000691a1c14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.104/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61f1ef94-3806-1d5a-24cc-00001d30784a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.104/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a730777-a5a5-4be1-9a32-000023858d10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/gpon","pattern":"[url:value = 'http://94.154.43.104/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aaf38292-9b30-e2e8-62fd-000027e070f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.104/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4beb7ff-c971-0b24-4e47-0000cdb3d743","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83b98769-cab4-43f5-7491-0000750fb026","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dad95e6-dc41-e596-0e27-0000fd4848bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.104/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d850ba92-bb7a-6ec4-d8f3-00007fa03e2e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20cb8f81-1c36-903c-a5ba-0000a42cab85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.104/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ab0d6d3-db33-ee3a-cd58-000067ba1fc8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49d48c92-8034-3bf2-0bad-00001c69e8f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.104/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--735ce3f3-faf1-f332-4abd-0000547a35a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.104/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--416a8171-bb92-02c6-edbe-00002eba66c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.104/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20c6ad43-39ea-342d-fd11-0000ef04d336","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95146b8a-7ac4-cfa6-a2cd-00008407bd7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7c1175f-8fde-d149-d89f-00007a765a34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.104/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20572975-4c44-b0e7-69c4-00001705b489","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_mips","pattern":"[url:value = 'http://94.154.43.104/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6568de07-7fe5-08bc-1d7f-0000adeb52b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82d0f300-dc0b-8059-0460-00004d342586","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad0258c5-afba-0f81-37d7-0000ff7ea7d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6c3a7bd-1bdb-a8ce-1164-0000dadb913f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_i686","pattern":"[url:value = 'http://94.154.43.104/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36337b13-d352-1d22-6731-0000990d999a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client","pattern":"[url:value = 'http://94.154.43.104/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f48519e4-157d-ca56-f6ff-00005c4fe391","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_i586","pattern":"[url:value = 'http://94.154.43.104/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cea9995-5c78-2fd7-b33d-0000eff205ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5d6f7e5-2936-25b5-cb69-00006f12578b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c7b1da3-f304-ca15-4c8b-000017f36253","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.104/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4302595c-0f81-4d27-e74a-000014a71508","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80b0690b-674d-325a-a38e-0000877dc9ad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6f39746-e89a-2888-eefa-00009ad50b41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.104/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5871b030-98df-9414-de56-000013da4f74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.104/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f652238b-1491-2629-6e2c-000022daf680","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9409f0c4-6b17-e3ab-5f7b-00000fb022bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/android.sh","pattern":"[url:value = 'http://silverrockay.pro/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d75efc2-0d55-dd9d-701c-00009fd46d5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8c56941-57d5-80d9-9e6d-0000da1f4470","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8ad58ce-9d00-0e00-5df7-0000b542f645","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61cc38fb-c1bc-7316-9772-0000c8aaeb9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6a8b81c-d7d9-a597-080a-0000155b1066","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/gpon","pattern":"[url:value = 'http://silverrockay.pro/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2952994e-01ba-2bdb-ef07-0000ab94e4c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_i586","pattern":"[url:value = 'http://silverrockay.pro/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14279c19-8ca0-cf22-412f-00009f7fad38","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d317d826-ab62-9249-8029-00000284b5ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_armv4l","pattern":"[url:value = 'http://silverrockay.pro/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca0ce967-64bf-6e5b-e9e3-00003fe49c4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_armv5l","pattern":"[url:value = 'http://silverrockay.pro/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e121baa4-faf4-4a8e-abae-00007844e69f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_armv6l","pattern":"[url:value = 'http://silverrockay.pro/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e9f2607-f4a5-f0e0-725b-000052575e54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f83a8be5-5e99-0143-b223-00004524cf2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_armv7l","pattern":"[url:value = 'http://silverrockay.pro/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17a34877-5ed5-48b6-713d-0000d2b70c33","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--999b8515-d9bc-3878-386a-0000cfb2026e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_x86_64","pattern":"[url:value = 'http://silverrockay.pro/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ab46aef-9ef8-ae70-c6a1-000005d626f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client","pattern":"[url:value = 'http://silverrockay.pro/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--501a1008-bcab-0ed7-a999-00004dc5ff6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_powerpc","pattern":"[url:value = 'http://silverrockay.pro/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9328effd-2d94-507e-cfba-0000a539e267","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_sh4","pattern":"[url:value = 'http://silverrockay.pro/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4fd9f72-0c6c-32dc-c138-000096d6e150","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_mipsel","pattern":"[url:value = 'http://silverrockay.pro/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60c7de0c-c8ff-d435-ed9f-0000e7d70328","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd80a9df-ca80-f3cc-8802-0000e0deb3de","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_mips","pattern":"[url:value = 'http://silverrockay.pro/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15953c5b-380e-a8e6-20bc-000067099ade","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2b312d1-ed23-bc52-f052-000052a1888e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5babfdac-4959-7244-f6b4-0000c4020461","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16cb086d-e94b-0e0e-2769-000070168cfb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7761d418-d3a2-e407-b7c7-000039a2e6c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13a38806-378e-91c2-fbd8-00004c7ed91e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/micro.sh","pattern":"[url:value = 'http://silverrockay.pro/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fa39dd2-71d5-f106-a614-0000f14ba2aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/chunk.sh","pattern":"[url:value = 'http://silverrockay.pro/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f1575c9-ba9e-c003-5982-0000559d8176","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1ac9d09-ffc5-f41b-a8cd-0000e0286504","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_m68k","pattern":"[url:value = 'http://silverrockay.pro/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b142717-f215-75cf-df53-00002d009668","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_i686","pattern":"[url:value = 'http://silverrockay.pro/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e35e1b56-d7b8-e38b-1a47-0000b9a2a026","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/android.sh","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b712f954-a8e8-13c1-fb43-0000a904e8c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c410d6a0-b1a2-f4a3-724e-0000e7db6af7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdd6b576-86ba-5cdd-f215-000052087c9d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/micro.sh","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f5487d4-1e60-7438-4a4a-00006632431c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_armv6l","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2daa434a-1ae0-4550-93b6-0000642c1ba5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a88a202-f226-9d86-b13f-000088a044d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_mipsel","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00c11409-5647-6679-8b41-0000396a5b52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_powerpc","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bf00c0c-420b-0f22-6612-0000ec640181","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d454b155-166a-1f91-d3d2-00000fd9a335","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1479d417-8d6e-17cb-3339-0000219239cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_armv5l","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6186779c-b6de-32a4-b5ce-000064dacd7f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47eeb865-8b22-cf5f-b0dc-0000d1c4a7ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_x86_64","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb03eb39-a1a6-178f-c1af-0000fb4fe0c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_i586","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6704cab-0e13-486a-762d-00002d9286dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--264fb695-6130-267f-91d0-00005b526aac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_armv7l","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81d6a0a2-24be-5631-4557-0000ef3d0729","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/chunk.sh","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9a2e76e-e133-3511-05e7-00009fd80482","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8aad0cc-a77e-88b4-e1fc-0000dbf8a58b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/gpon","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15a53f41-179b-d62e-9873-00007b4cdf17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_sh4","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2f95db6-96fe-eee7-3821-0000fed1ae6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cf00539-cdbd-e806-601a-00001f069d74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4962d3a-ed58-cc76-ea74-0000e4cc49c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d62e556-83d3-1105-c68a-00001cf2107c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_armv4l","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9455560-c6ee-5e09-0124-00007ddb9269","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_i686","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fd1dba8-8ac8-b01d-bc40-0000b005b7df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_mips","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73fdef7e-4d1d-8478-fba4-0000b0f36105","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_m68k","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21c861ac-01c2-cbb7-dea7-0000cd4df1ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5fe6d20-c21f-28b8-76d7-0000466dc90a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23a4fa06-7fdb-f6e3-3954-0000cf1357f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f9bb2ab-ee24-e7cd-db99-0000907571c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/chunk.sh","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99d72946-18f1-e7b2-ce8a-0000dc906cd9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--651fa3e6-a4b3-92d1-9dd4-0000513b0b06","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bda603e9-5c1a-f3c1-e4cc-000046ddfb22","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_mipsel","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34ca3b1c-717e-6b1f-1317-0000a649db18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da4c44bd-1874-7d35-a9c6-0000d28faf8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_armv4l","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f59120d-73a1-a49a-a7bc-000096ed4fe1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c4f62f7-cd5c-5c7d-5457-0000f55575f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_armv5l","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65accc9b-5ea9-a577-a180-0000bd1f655b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9e01642-11cd-68cb-b6a8-00003bfa4b16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/chunk.sh","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f2c8509-143d-b8e0-5914-00008f8b7ef3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b4a8d24-8d2f-a6ab-aafe-0000d316e581","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.172.218.181:39713/bin.sh","pattern":"[url:value = 'http://45.172.218.181:39713/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--119e49c7-7015-9242-2276-0000569a8f75","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_m68k","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3d3d1b1-ff96-d0bd-3d4c-0000b713a61a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9300db62-d052-6972-9bf9-0000dde946a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_i686","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--603ad34d-d88d-b232-fb88-0000e02d1433","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_mipsel","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b26f3d9-e912-0551-9206-00009bb27c19","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_i686","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63df3243-3918-bb6f-ba79-00007db6ed60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61b244d1-0b2d-a7de-637f-0000c9474269","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_mips","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d5cc92a-1ec3-fb4e-1b32-0000b949f70d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_x86_64","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4161b5ce-a3de-afac-ea18-0000cc40f596","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_i586","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37ce0158-4e48-65c5-366a-0000f31ee467","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_powerpc","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43270b97-bbb7-99bd-3fda-00004ad48738","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_i686","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92ecc116-43fc-570b-421e-00009780d2a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69f2956f-6d91-e02a-f1a0-0000e87824b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b3f63a9-45c9-b802-c72b-0000da693623","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46203eaa-3267-cd2b-fe1e-00005a32a6eb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1254f1a-a8e4-bded-e4f7-0000d922e444","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/android.sh","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5404da31-9ffb-9ce5-7ceb-0000ad6523d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6a8fa79-789a-4204-a21d-00009908347a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_powerpc","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f3dc71b-752e-cd07-7c9b-000038d60428","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e790075-df26-f6ac-693f-00008f952693","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_armv7l","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7713577f-4b42-0faa-8d17-0000da9fe0f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d46c7d55-da55-ed8c-f4b8-0000409483e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce3f58a2-3852-f6ed-aebc-0000ea8e360f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/micro.sh","pattern":"[url:value = 'http://windycreekbc.pro/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9384810c-d26f-4857-5437-00003521526a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c16266d3-2351-ba34-61c1-0000eba20253","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c09599b0-ddc4-cd60-cecf-000011ceede6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--573394cf-6d06-1893-646f-0000c478ba8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07d09419-9c4f-df15-a01e-0000747f409c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_armv4l","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1673941f-3406-3ab8-c805-00003f2dce6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccac274b-7186-fda5-eda3-00008d1c7ae5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.39.32:52224/i","pattern":"[url:value = 'http://110.37.39.32:52224/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a36b4dc3-3287-5dd6-21d9-0000f828e48c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2c191b6-5ad8-39bd-36b8-0000b19c8eb3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a187d9b7-7f39-b924-db4c-00001741c54f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69614fd6-ed67-74b5-e837-000030260e41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_mipsel","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47fc9bb0-5e66-9bc3-806f-00001796561f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79ad6547-3ff8-6d04-b00f-0000314e9e25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_m68k","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--332fb43c-ff85-d144-8d20-0000f27f0f8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/gpon","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58dc9cbe-8b22-8d57-f7c4-00006927cd05","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/gpon","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8b18661-846d-7082-3820-00006cdc58b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/android.sh","pattern":"[url:value = 'http://windycreekbc.pro/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--458121cf-4734-e49c-b766-000078a532c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_sh4","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e315df59-355d-a0d5-26ff-0000fc666d49","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_i686","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f9fea74-41bd-67d9-b7c6-000063af10ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8214e19c-f356-f7f1-85ab-00005dc01268","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5e00396-e4a9-979a-994e-000086cf30a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/micro.sh","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75d76b1b-0025-c062-6a79-00007abbfc51","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client","pattern":"[url:value = 'http://windycreekbc.pro/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a7e675e-6f2d-91d7-9d06-00000f55e705","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77d9486a-6a4a-f869-9aa7-00007699a452","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5607440-67e1-161e-c039-0000820d1571","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_i586","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a19813ad-7da8-6125-0b18-0000baedd1d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6133a637-3c79-35f8-b7cc-000092dfcca3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d827c773-a57d-a3ee-3868-00008370679d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bd0af66-20ef-8adc-7ac7-0000176080c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3a152d6-dc32-7184-e861-0000542ea027","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2030dd9-b59b-c2e8-eb32-00005a896444","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7db7972f-5d60-e43f-d0ce-0000ac627efc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_sh4","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fd80e85-0fe5-90c3-0cc2-00000503ebd2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_x86_64","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3291981-6d51-634a-df39-0000cd3305de","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a34c61e-8fc4-1b01-8b9f-00005eda4f23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_armv5l","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab1e591d-6751-408b-396e-000071feae58","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_sh4","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d99fb189-ca4f-5dca-f968-000087fc7454","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_m68k","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00de78fc-c6cb-2289-5e97-0000ce25c337","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--932ff75f-9bc8-520b-3128-000063ba6693","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_armv4l","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4440a4a1-173c-0a1d-0f7a-0000907b4ac0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3bd0384-f7b9-10e9-df5d-00008cb76ab3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/android.sh","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16011778-b7df-783b-8241-0000dc10c850","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e87a263f-9e6f-a2a7-1de8-0000a84ffced","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_armv6l","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f967885d-308f-f365-ebbd-0000b09e1e0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90c0198e-6216-872b-45d9-00001fb9181c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_x86_64","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7983e1bf-a427-e2d3-6e7d-000009a0eccd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_powerpc","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b57e3d52-97ff-70c1-9a83-0000461bab40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09b8617c-67c7-647d-a0e8-000010c1b5cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_m68k","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a2d23ae-79f6-9133-483b-0000dce61e8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c764c439-7bdc-a607-817f-00003a852c7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/micro.sh","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff057521-fa6a-b113-6d06-0000efdb10ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/android.sh","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9c562bc-4190-983a-c113-000084f77d09","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/gpon","pattern":"[url:value = 'http://windycreekbc.pro/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f22c635-3318-1a9c-ab03-00009e165366","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/android.sh","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bcc3b01-560f-edfa-8795-00005bd44e21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46b37dfc-7859-6285-4661-000080512ad1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a11995dd-e457-a946-4094-0000197a35f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_armv6l","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f161177e-aabe-3112-cc4f-0000952fd55d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_armv7l","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea0bf05a-9db8-555c-5979-00001633d617","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91681578-125a-1bfb-bc20-0000da4873a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--817ceb29-9f66-6304-a668-000027d32f70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_powerpc","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b08bb9c8-6cb4-9056-6b1c-000024a7cdbf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4c5b00b-e631-34a5-155d-0000f7e8323c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_mipsel","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7535dc1e-6bfa-b196-fd24-000099f08591","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a7195ca-2aeb-bf8e-2629-0000437a69f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_sh4","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25a65b41-42ec-7283-6575-0000e3d4203e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_armv7l","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--537cdcf0-ea03-97ac-5e30-0000358c8129","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/gpon","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--823f4d76-8ad1-c032-e559-000057bb4dbb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/chunk.sh","pattern":"[url:value = 'http://windycreekbc.pro/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19780ad2-e560-0cf3-2d7b-0000de4ab56d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b802a49c-4d95-31e4-a4d3-0000241a1c43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_armv7l","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d652cef-9ee3-ae0f-af93-000052212c07","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1536100-c8f7-5eeb-0ed6-00007af21fe7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_i586","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef8d6600-bc9f-1408-b9be-000054d876fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cbd6a00-c7da-8b82-c875-0000deb4098e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_armv6l","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--355453b6-bdb3-408a-4935-0000c8355c43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_armv4l","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1128c10-6e96-40a1-d6ab-00008cdf4000","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d8ae020-d5db-b9df-0ac5-00009f289ae1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dff707f-e223-82ef-baa2-0000a9e6fc85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--104d41b1-5665-4fba-7825-0000d1e592f0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3114dde-3a20-3dc1-bc67-00005c064ced","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--310e2dae-e06d-2758-59b5-0000e002421d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a91b165-f216-3d37-1b41-0000c0bc7064","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf59f822-71d9-f49e-d59a-0000016d550a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.38.210.180:55714/bin.sh","pattern":"[url:value = 'http://110.38.210.180:55714/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b64d1ed-b011-0921-221e-000087b057c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/chunk.sh","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--179039c3-83bf-cf52-192d-00009914735e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_armv5l","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--163496a1-e529-5745-03ff-00002a63abc6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce016727-a9b9-cbab-28c6-000094cfd8f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76b10870-965e-9af1-bf5e-0000d438249a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--605be62d-3fd3-a8a1-d1c6-0000307e4c6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9a3aa6c-4882-2a33-1701-0000ae8cd102","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_x86_64","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1af8149d-782b-6715-a4f3-00009c75c36c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/micro.sh","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27b1461e-8693-a057-ec6e-0000f88ba06a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/gpon","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--459455aa-04fc-6d7b-c1ff-000010376311","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_mips","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8c34839-5c18-5888-5d3f-0000e501cd1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_sh4","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56f80149-29ff-905b-2382-00002140b8d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/chunk.sh","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95b3855f-e403-f176-e7dc-0000870aa28e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_mips","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e8b0882-414c-cf08-1dc2-0000a4745aee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_armv4l","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35e6f69b-0b2e-1ca1-10b1-00000ebf13fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_armv6l","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c776ce8-05bd-e461-299d-000054ae04ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36aaa117-0fd4-419b-c5d5-00006c003733","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ecba558-72eb-7563-0bda-0000491f692c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_armv5l","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35815191-ccbd-6165-a37e-000031b848ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_mips","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--539ba77f-22d0-786f-86c0-00002d400a72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/micro.sh","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d996c74-9778-0d1c-56bd-0000e7158a04","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9146653b-253c-8257-7c90-00005b7d3409","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_i586","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d9e7007-92de-b4fa-e184-0000c9b194b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_m68k","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cfdc7da-8412-9faa-6e8d-000033df3a4c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_armv7l","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ca07738-6dcb-e371-8368-000068a6bd43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b54bbc8b-d978-ed8f-693a-0000b068c8d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67cc5690-26c4-b8bf-a8b8-000077568970","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--440755b1-4616-d95d-ade2-00006942ed7f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_x86_64","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62364be9-a41d-20c9-446c-00008e72adb4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5db27d11-3e20-38ac-bafb-0000566c59af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_mips","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07623134-a9e5-2f39-f378-0000b2f50f23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_armv6l","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52be14e2-c8ac-f779-e9b9-00005c6708ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_mipsel","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c2ae885-5be3-50f1-1424-00005e942c9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f22e5d79-d14e-1c22-a8eb-00007c953855","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00997a42-1bce-5dce-b677-0000db6ba69c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2790dc4-f4ab-909e-e4da-0000fea7cc25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50ec4823-65c4-9a78-aca2-00005f61d619","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.116.152.6:41032/i","pattern":"[url:value = 'http://119.116.152.6:41032/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c35775fc-a7f1-bc77-9a6b-0000efef863d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_armv5l","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e483b19a-5171-8eb8-2843-00008d9d350f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2eb23c3-14b2-a79b-b223-0000eeee2194","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63c515b9-311b-f750-89b4-0000e2425079","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://178.16.54.109/locopoco","pattern":"[url:value = 'http://178.16.54.109/locopoco']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5fe1597-6b4b-703e-575d-0000619ad231","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_armv6l","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efceaeb1-9390-2fed-cb57-00007cb2afb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_powerpc","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b7c32e1-b05c-9b72-ae24-0000e8959604","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/chunk.sh","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f960c521-63f5-213e-6101-000036c62bd3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7914b491-187c-af92-33da-000092d428d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_i686","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2a52b5c-101a-1475-5ec0-0000411c3896","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46b2099e-d0e6-1e5e-f174-0000f756b9fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47f7273b-f2a7-0e97-186a-000025549a42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cba7fa87-11d4-2e67-9abe-0000b6ed771c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_i686","pattern":"[url:value = 'http://94.154.43.117/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c6b9fb2-4d31-b518-c60a-00001e1541c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92e77d9d-ed30-9565-6bc9-0000a5421eff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a804cc6-14b9-10bc-f7c9-0000d0202cef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.117/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f51c61f7-e32f-4483-c9b9-00002c1a26a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.117/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be313c9f-88b0-2ff6-135f-00002014c318","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.65.199:56561/i","pattern":"[url:value = 'http://219.157.65.199:56561/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--448b4c2b-4ebe-c59d-2dd5-0000e6c8b64a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d33744f-1cdd-aa09-ec65-00007b3352aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_mips","pattern":"[url:value = 'http://94.154.43.117/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da6ad138-0dd0-2b9b-ff60-0000eb4a8d44","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fce524d6-6ecf-d3d8-eac5-00005cfafb81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_armv7l","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b726ca19-43f2-0e95-ef4c-0000049967df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_i686","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68027e64-a7f2-915b-9459-0000e41a136e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.117/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--511f4099-d9b6-cfcc-cc6b-00007bc58470","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.117/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aabf3ce-d441-3acf-fe32-000011d236e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/gpon","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44d29395-8529-49a8-2cc2-00003d1f55d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a10a2499-8774-fb47-7816-00001789cec8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0f3c0c7-688e-4365-f969-00008fd8b123","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_powerpc","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10b841d5-f997-2391-eed3-000053ecf79f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.117/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--319857b7-4c34-e24c-b84b-00003f497def","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2735bb54-b844-28f5-8483-0000ce4170b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dde5bb2-ea8f-2b18-c112-00000a8814a1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.117/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4473f355-38d2-d517-ffd5-0000689c3b49","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31d9ae7c-e65f-07d0-05d9-000066162fbc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9b328be-039e-8584-e4da-00003483dad1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb595f4e-22c5-878d-ef11-0000a1e64d54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_sh4","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b99452c-ae76-2b82-e2e2-0000c1fc6af1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--432f2da7-2acc-7d5f-50dd-0000a3ba69be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.117/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e0b05b9-6c1d-f70f-67a4-0000d45cade2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9e144de-a115-5be5-e989-0000307905b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_i586","pattern":"[url:value = 'http://94.154.43.117/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3ac0e8f-fd8f-ce72-ac13-00005ffcdbbd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_m68k","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af803a59-5686-251a-50b4-00005f0a0d67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_mips","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6960a25b-21a3-ef78-0406-0000451c3ba5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a891060d-e1a0-47ed-fbbd-00002dfcd201","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3cd6b46-28ad-e44a-28f7-0000e3bdb85e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7c87715-a429-24fa-4f4f-00001b5a8151","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_armv4l","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbf7f17c-2f42-cace-5d41-000087e36312","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.117/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ced34654-538c-7160-a67d-0000263aa8e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_armv5l","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37b571fa-4469-26c1-b96d-0000c10abc2b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e121ff32-36a3-d5a7-98d8-00000cd4999d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0223041-52c8-4117-af20-00008f08d5fe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_mipsel","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--260b2f52-a9fc-d3be-3df0-00001e805eb3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/android.sh","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--177c2735-97ff-be29-dadb-000055a0edb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/micro.sh","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dc30a6a-2d17-e5dd-bf3e-000049b470d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8267b733-91d6-7f8b-dc90-0000aa09d261","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c32400c-55ce-b9ba-1004-0000c5c2a253","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b520ac8-27fe-f0f1-0a4f-000014405a7f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_i586","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3faa800-1b18-7e0d-7f28-0000cfc0688e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.117/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94ca5bd0-61d7-ff89-915c-00005b01df3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16f6f6ab-f4ed-0161-e843-00003763e62b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client","pattern":"[url:value = 'http://94.154.43.117/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a341ce6-c4a3-4c18-fa56-00009eda400e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.117/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--841d78c6-f77d-bd7a-e1ce-0000e5b430ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/gpon","pattern":"[url:value = 'http://94.154.43.117/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6805912-ced0-119a-c4a5-00006d15575b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.117/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--549486b3-0249-ca81-4f8a-0000a9d56d23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--decb494b-f86f-1c6d-1550-0000a5b4c825","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89604d80-13d3-a62c-ac7c-00001d260eb7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_i586","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d442a26-00c6-a760-2bbd-0000d66c36c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_x86_64","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71194f25-4b76-777e-9d5f-0000d97a3ade","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.117/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--469f6721-4f4f-791c-dd7d-000087f51a8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3497cac2-8f0d-fcda-6932-000039233e97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://89.165.130.43:46337/bin.sh","pattern":"[url:value = 'http://89.165.130.43:46337/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75c67617-d759-d6b5-c6cd-0000e67d49db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_f5aca509ea370844.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_f5aca509ea370844.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e9fad7b-fb41-5990-58c8-0000d7cb8e60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.38.210.180:55714/i","pattern":"[url:value = 'http://110.38.210.180:55714/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d752ad2-e5bb-d658-7283-0000357fed76","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.18.9.255:60894/i","pattern":"[url:value = 'http://60.18.9.255:60894/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8afd4d34-87ad-5a1a-5335-000051cfb781","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72cde8e9-aa75-51f8-5f1f-00002137691a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.133/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50270621-98e0-1944-4170-00003ea97bc4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/gpon","pattern":"[url:value = 'http://94.154.43.125/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d456033-65c8-b3a9-1c70-0000b110c0b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--587ca8c8-4ac3-fd41-6696-000054a789f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client","pattern":"[url:value = 'http://coralwebqe.help/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3199e370-b197-16a0-2b8b-00005c07a600","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_mipsel","pattern":"[url:value = 'http://coralwebqe.help/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcbf7356-f51e-10d9-b31c-0000c38b9338","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_i686","pattern":"[url:value = 'http://coralwebqe.help/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff8c2a35-f737-0a22-d9d7-00005db36109","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/android.sh","pattern":"[url:value = 'http://coralwebqe.help/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ae90360-efd8-bfa2-f13c-00004e5a87db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cfff917-3a75-0dd0-04f7-00000563453e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_x86_64","pattern":"[url:value = 'http://coralwebqe.help/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a58f2256-b715-609f-1f8f-000046f2cf98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84164aa6-fb6c-6ecc-4f12-0000d7c17626","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/gpon","pattern":"[url:value = 'http://94.154.43.121/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b4f58bd-6f5f-41ed-a785-0000adf1a32b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.125/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65bd53f0-31d8-6691-fc14-000065f4f7bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.121/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6239640-9576-dfe2-6f58-000001909426","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.110/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30a9a6e2-5a3b-7fbb-e7aa-000009474173","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.133/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8410a486-5d28-6422-0b71-0000c6124b91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/gpon","pattern":"[url:value = 'http://94.154.43.133/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ca9b336-ad12-4be7-f226-0000b4723ac7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.133/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96c7f404-9e5f-fb55-2d78-000086af9e4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/micro.sh","pattern":"[url:value = 'http://coralwebqe.help/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7eecbbd-d173-a27f-d33c-0000564ce9d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.121/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b81437a-4e4c-1a61-0e2a-0000ecfb0713","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29bd4624-afee-f0fb-a7c5-0000d8c18c09","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.121/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79e480b3-617b-8bca-7205-0000af8abbb4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/gpon","pattern":"[url:value = 'http://94.154.43.110/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6750ad7d-692d-a6de-8f44-0000d89d2d9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.125/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7d91715-42de-bce3-e8bc-00001417ca34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/gpon","pattern":"[url:value = 'http://coralwebqe.help/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dac7e1d0-1034-b95f-53c7-00003b9ae5fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/chunk.sh","pattern":"[url:value = 'http://coralwebqe.help/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a2b9f0f-323e-cbdc-2321-0000a54f6d2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be911558-458c-8be7-6c30-000026647fde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_powerpc","pattern":"[url:value = 'http://coralwebqe.help/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2607c948-588b-869b-2d4d-00000ea36054","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_m68k","pattern":"[url:value = 'http://coralwebqe.help/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c8673ec-521f-4cd4-dfc4-000054476076","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d5ef7e7-695c-51d3-efdf-00008ff5887f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_armv7l","pattern":"[url:value = 'http://coralwebqe.help/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3d56d10-2c24-22de-12d3-0000cebad5bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf26bc68-e64f-fdb3-573c-000028cfbbc0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f25fa38-39d0-dfc3-4f35-00007b592c99","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ff959c6-c62a-d7ec-c48e-0000ce4c0366","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6445c6a6-2d30-bdeb-db65-0000b295a1cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_armv6l","pattern":"[url:value = 'http://coralwebqe.help/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f689565-c67e-e355-42d0-0000f535db1f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_armv5l","pattern":"[url:value = 'http://coralwebqe.help/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4297cbf6-06c6-5e74-8067-0000035a42ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--496dd70e-d4f8-1aa7-d0c1-0000039226d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bef9cd0f-6c14-e2f3-2a27-0000451fe196","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_i586","pattern":"[url:value = 'http://coralwebqe.help/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37c529a1-8632-7669-b922-00008384db1a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaa526f6-8fde-4f87-051b-0000205d9e65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_sh4","pattern":"[url:value = 'http://coralwebqe.help/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37c4ff81-01ef-19ae-d6bf-00001baccff5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.110/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5673a424-952f-15d3-412a-0000c855f2af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_armv4l","pattern":"[url:value = 'http://coralwebqe.help/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bc4ea55-dd7f-8764-a52a-0000a699b441","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.110/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9831169e-be12-6047-81cf-00004ebd6521","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4bb2b70-01ac-892a-4792-00008a44ba27","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_i686","pattern":"[url:value = 'http://94.154.43.133/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8668542-af5f-dba1-daa2-0000654db49b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.129/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99595684-65d1-ef6e-4018-0000ec1ce5e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a867f6b-0e26-fee2-7770-00001c8822d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8ae0b9d-47d5-c38b-574e-0000d3273991","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.121/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04b259fa-15b9-7d77-0375-000002338711","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.121/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38767f3f-5e3d-f87b-ad22-0000ca80560b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b05989fc-9707-b215-9e32-0000b05e05f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.46/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21705398-7a08-8d48-efa8-0000c6e5d36c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8946d8f7-9cff-b951-c5e5-000092a38bc0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.110/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba91abf1-f061-a5f9-5435-00008a8b9a03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.133/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d2517ad-725b-6239-ee3d-00006b51db21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_i686","pattern":"[url:value = 'http://94.154.43.125/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f01df6c2-c5b5-9d75-db24-000047bd2d92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.133/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a748e06f-197c-afd7-dbd5-00009184f35a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_mips","pattern":"[url:value = 'http://94.154.43.129/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed5d6c7a-e6b7-0a04-6373-00007182a127","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.46/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c508427c-b372-ad84-04cd-0000650971ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bf1bd96-9830-d538-d527-0000963993e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e987a5e5-4413-13ee-72d2-0000fbf30923","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71dc6ea7-3b59-c5a3-a524-00005c5ad6ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_i686","pattern":"[url:value = 'http://94.154.43.129/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64cb7ef2-9538-b7fc-62b6-0000ff3cad34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_i586","pattern":"[url:value = 'http://94.154.43.121/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a81e7c1f-1e9f-bab9-9a57-00009a89aad2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.100/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d08b0718-53c0-2592-b96c-0000d3687bd9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43407ebf-b91f-8ee9-392f-0000fd14e928","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.100/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7a1d353-62ae-33f6-95c4-00009148d052","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f5265b3-ff61-3c17-7e61-0000ae81aac2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_armv7l","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--347f3670-01b1-ff2e-0c5f-0000e921d012","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_armv4l","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9902ab05-f64e-e41a-8978-0000514083d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ef36b43-1049-4b97-da07-000024176783","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_x86_64","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88d0e404-15b4-5651-5848-00004fbe09c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4be4150d-3228-faae-87fc-00006c7c16c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_i586","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0c9bb4a-feea-16b5-e449-00006cf2401f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.125/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc1d7e2b-03e2-4b1d-9299-000012d4d4f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_mips","pattern":"[url:value = 'http://94.154.43.110/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c48370d-c054-a9b9-235d-000014aebff7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f389236-c5a1-7bd0-d81b-0000bfe58cd5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.129/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c768d877-3bf0-1815-28f4-0000af409dc1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2552a87-8458-679b-03a5-00006466211a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49a2ab54-8fb4-2e24-2459-0000eae8646d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_i686","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9d28a0b-1455-df44-ac22-0000519269af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.125/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6703fb9-9b39-8d0a-b629-00003622dbf7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.46/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--010d78ee-35df-b2a2-c10b-0000ce5d3746","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b30373e-a7de-eb3f-535e-00006c5d1df7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96a6b5d3-fa41-458b-1784-0000ddbe9271","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8f38af1-9798-f23f-2178-0000a5a88fd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f135e785-2f82-9b61-4a36-000054043d3c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bce1d834-8fb2-328d-eb27-000049f895a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06c46f99-da44-47da-959f-000078d8b716","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.46/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4187c606-2f63-d5f7-b98d-00001e875f16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e3f88e2-287a-000d-d057-00001b2c7e10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f45500cf-59d9-ebbb-475b-00007584315c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3db108aa-9df0-576b-7435-000054269437","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.100/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e03916e-7788-6bc6-e74c-0000476c494b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.133/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7eadedbd-d0df-5453-f1eb-00007a477a67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.129/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60f92ca9-d8e1-159e-00d7-0000df8f0237","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/chunk.sh","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2107724-6f7c-d5e2-0299-0000b6fb5465","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.110/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb70ba75-bd5d-d736-bc3b-0000e863d8a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.110/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fcb5591-a284-df8d-470d-0000c3dd253f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3d973f1-05b5-f2f2-e566-0000bb6d1cff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ebe4403-3285-ba68-2f9c-00004efcef23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.129/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f75e3c47-bc61-eb93-8075-00007e83db10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.133/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49b76968-e413-f806-93ea-0000538829be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd935e0e-f1c5-ee44-4c1e-0000b3d6da3d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--280cd885-6fec-7e6d-b0b8-000053df9fd1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f63a9f4-60d6-9c33-ca6b-0000edc5a98f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_i586","pattern":"[url:value = 'http://94.154.43.125/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4a8e494-50d4-933b-ce95-0000ec734874","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbb19965-c7ce-1602-e2ea-0000a68ffe97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_mips","pattern":"[url:value = 'http://94.154.43.125/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebe73fee-1dec-e44d-b984-000031bae508","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1fce746-c34a-8aaa-0ef4-000025556f31","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.110/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ae4b7e0-33c1-a5dd-625c-000051778b1a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.129/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--775737a8-48ef-f93e-bbc7-000046152d62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cabb9772-3545-6780-d325-0000c1b08f83","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2cec521-144c-cb88-fc84-000007a8a567","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30bff93a-d823-56a1-9781-0000432ad131","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.46/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0acb663b-2bf7-446b-8e36-0000e35998cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client","pattern":"[url:value = 'http://94.154.43.125/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dd712dd-15ab-b43c-8cca-00001164d474","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa1fcf74-4f25-935c-9e9d-000066e443fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fd819e4-5204-a3b0-108f-00004995ce13","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca720cad-75d9-f475-0b16-00003768d44b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client","pattern":"[url:value = 'http://94.154.43.121/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--971348ce-48be-c455-f0c6-0000d3597aa0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8cb7384-9f2a-50c1-2e77-00001aeec747","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/chunk.sh","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c65104c-f08f-74c3-c1e9-0000faecb6c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/gpon","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f5a2201-3aba-950c-1ea2-0000d9b8d16c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/android.sh","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4669096-5873-6430-835d-0000d878cf2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.129/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--064954f2-1439-f4b4-780f-000093e18372","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_armv6l","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76648a33-ab0f-128e-2045-000059e8cb91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94979ca0-0c47-150b-d53e-00009e91dbab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f6d4e12-9d0c-a4d7-fe7b-0000b62d4d81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cba62c52-15d5-cb68-5c59-00009dcad2c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.125/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a2bfd9e-93c9-5226-bb4a-00000e55b68e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_mips","pattern":"[url:value = 'http://coralwebqe.help/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--973f6152-98c6-16d9-73ad-000051cec83c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.121/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84de4367-7a5e-9095-a0a6-000003d17b9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13ff86a1-ff06-8f5d-9831-00006c17a2aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.129/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6550e20-b1b8-d47e-ca6f-000049b98b7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f9d8cc-b49a-7056-ce85-0000e1432f50","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2f8ec2c-cbe6-9329-d0f5-0000848c3c06","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90216fc0-2bf0-fbee-2177-0000cbd5b448","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0194e63-8958-eb8d-730d-0000b476fa2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_mips","pattern":"[url:value = 'http://94.154.43.121/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4cb6650-b45f-51ba-acf9-0000a7dbbcf3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/micro.sh","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df4d2d23-181d-d6e5-c1da-0000e63ada0a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--668dc0ab-7b05-0911-6c96-000079a8df9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_i686","pattern":"[url:value = 'http://94.154.43.121/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f1f0d57-7d73-406d-39f0-0000a5230eac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d214c38-b745-eca6-7ddd-0000ceabe19c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--451f2a2b-be07-86b3-0e38-0000220d2d37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aa4e82f-8a0e-f6bd-300f-0000807b5aec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_mips","pattern":"[url:value = 'http://94.154.43.46/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0314afd-1eae-a8aa-3ace-000012220228","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.110/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0cdece2-a530-5c0e-76dc-0000490e437d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e34d1131-95e7-063d-ce82-00008a6bd4d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9707c8d0-7002-a2e4-ae4c-0000e4b8b8ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e76d8be-9d96-c61f-416f-0000cb310df4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_i586","pattern":"[url:value = 'http://94.154.43.46/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebe4e889-d133-8c47-282d-00002b523acf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.125/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ec7503a-6d9d-0396-01b9-000062312ff1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_mips","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2f58c27-fbf0-5546-ac76-00009395c4cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_powerpc","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f68c903-ef2f-1271-a871-0000af617ef5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--739ad0fe-366b-7a4b-c4f4-0000dacea442","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_i586","pattern":"[url:value = 'http://94.154.43.129/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f79dadb3-0c80-19af-01d4-0000a679284d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.125/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e997c74-0633-d9c1-6d0e-0000add79806","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client","pattern":"[url:value = 'http://94.154.43.46/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec4d695d-254c-f7e3-e273-00002c401562","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_armv4l","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97f7b196-0d4c-4a7b-f34d-0000d3ef793d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.133/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58c44668-3760-17cc-18b9-000088983144","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38d2d562-b8b2-2db8-e251-00002bb7d87a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.129/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8c1bc59-b532-bcc5-ffb7-0000330843cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a99b7c6-16a2-6cdc-28eb-00004303bcc9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5019fe54-b38a-d024-aa14-00007197a761","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d507c94-4586-a883-e818-0000e68d32b1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.100/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67d3caa5-a550-797d-0ae8-0000050a66e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.100/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de7b0bdf-0148-4578-01d8-000056804602","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_armv6l","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8b973a1-0b36-4f41-bffe-00009a63531c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_sh4","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6d1485e-910e-1031-5c60-00005b2061fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da98bd78-30c8-d745-59c6-0000012bb71f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2e34484-6918-0321-b665-0000bf5ccff3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.121/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3adcab5d-2c8a-fca8-ea89-0000528403aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.100/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68d17e9f-4c5e-094f-05dd-000042510c31","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_sh4","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee5e6612-08c7-6001-7007-000054a0828c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d58e1dbc-1113-8568-4c9f-0000cd5e8034","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.110/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a84465de-2c4a-e595-ce17-00001a5a4757","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--627549b6-65c8-e3b6-a564-00003471b691","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2975f507-3cb1-f201-ba8a-0000b89dc349","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6fd9529-de8c-7cd9-4891-00000cd0c889","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_i586","pattern":"[url:value = 'http://94.154.43.133/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9071dfc0-3f36-064a-925c-0000447b4b04","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client","pattern":"[url:value = 'http://94.154.43.129/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d9ddbdd-2dc7-dde1-f637-00009d5510ad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4465d3b-4094-642f-d84f-00004ce28897","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.46/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2ffd9c8-a673-9cb4-65ab-00001632137f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.125/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24aa39eb-6b23-2914-33c7-00006946bd87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.100/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c12f1a3-b9d2-22f2-b8d0-0000d156076f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--622fa5b8-eaa6-c4d9-3c01-0000479a9f91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_mips","pattern":"[url:value = 'http://94.154.43.133/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d640731-6485-d25f-c59f-0000d441f9a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_armv5l","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5279645f-3080-8c4f-77df-0000bbde4b4a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7024fc1-7a7f-c84d-547d-0000fdf48b98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--905de9b6-c663-74ae-e309-0000afc3a270","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.110/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37215890-9b6e-d560-ecbd-0000376e3a6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client","pattern":"[url:value = 'http://94.154.43.133/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2c42c4c-0180-68ba-ccb2-000028ce5cff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ea906eb-44c1-754e-7ade-0000a891c63b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/gpon","pattern":"[url:value = 'http://94.154.43.46/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f556581c-866a-081c-9817-000011203cd2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_armv5l","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20d0f570-3b34-67b3-1e29-00004f9feaf2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ca733ce-0607-e862-8469-0000d39ead03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bb5c2f0-f5a0-99ad-d8f7-00000375c42a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--faf4a9b5-6604-c3dd-8297-0000f2f6480a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff2dcee2-af42-6638-20cd-00004eb6e72a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_i586","pattern":"[url:value = 'http://94.154.43.100/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2b133eb-3798-83e2-e65f-000019cc9c37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87adfeba-e3af-383c-0be1-00001ee72d89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6c1346e-2ed5-0e7f-1b87-0000e176a2f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_x86_64","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--169c5b69-a2aa-1b9e-8cac-00001386eee7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.100/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--164b5d41-5b6e-596a-e9d5-00006b35194e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.125/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a44408b-a521-1521-290f-000098de7b39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e91ad55a-be3f-1450-60e8-000094702601","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a1560ab-f8a4-b282-75b2-0000297b78e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_i586","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28cf4eba-bd39-e38b-1647-0000599e83ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_i586","pattern":"[url:value = 'http://94.154.43.110/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24b5f65e-4816-7cf7-ad2a-00006bb94708","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5c575f9-3ec9-cdc2-beeb-0000f725b688","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8853def2-30f0-eb3a-1917-0000afef0a47","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_i686","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e906c783-7064-618a-4789-00007add0422","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.133/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4948a67-dafe-989f-690a-00008fe0bf43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99b2e1b4-00f1-30d8-d5a2-0000542b03f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48df2972-f05f-0ea5-31f0-0000f129a976","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83c02dbb-b16a-68c0-466c-00008633cc83","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.133/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8183dc1-4918-14c4-a545-00001d9f69c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9707ddb-a271-7b5c-ba78-0000bf3ee901","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a176e11b-ffa7-eee7-6fd9-00001a061f3a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85cd64b1-79d5-efcc-5f60-0000d4aec1a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8ba73b2-792a-1de6-89f4-00001d0a1f9f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ffc48d9-e4fe-8b16-db86-0000fa853064","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b75bf43-3dea-745a-b9fe-0000c5984168","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/gpon","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a19a78ed-1fff-d7a9-39dd-0000a2708f58","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.46/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b307ec77-59d6-97ba-b28a-0000c967128b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb64d4b9-7adc-4dee-bf20-000091722580","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.129/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25ddb644-f893-735a-3e26-0000c918c7c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b53813e4-724f-e5a2-679e-00001370c46b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.100/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f705d5e9-ae56-9db4-b84d-0000de606ba3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/gpon","pattern":"[url:value = 'http://94.154.43.129/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53b2c6c8-f5ac-fc84-a381-0000d305206d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6c87e9f-4db1-c23f-4cf5-0000263aa45f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9de891e5-4b17-9a4d-c9eb-00009dd48669","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe424bf0-f7f5-d5d1-fc38-0000caed80f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/gpon","pattern":"[url:value = 'http://94.154.43.100/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2659622a-db7c-0082-5409-000084d066cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40323b1b-8a6b-d9a5-b983-00001060b7c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c688dcf9-2d82-bf88-963d-0000808d8c36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.46/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0faa24b9-462f-2944-d425-0000f9122b6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c1e0fcd-d5b8-1a11-628c-00001096611d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9c0376a-c72f-2ed5-daf1-0000ba556925","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7603a9e-4e17-85fd-b92e-00006be06fb2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_armv7l","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--952261bd-167c-20b4-895e-00009076337a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd6b70bb-5d31-405c-8e4c-0000c8229584","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_i686","pattern":"[url:value = 'http://94.154.43.100/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ba72e09-d285-5e8f-6ba8-0000b81241cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_mipsel","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fa1dbbb-1750-b562-8224-0000fe60db8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4188751c-4ee2-8908-9452-00005061995a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a50903d0-dd21-f531-b1b6-00002b0e9b5c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.121/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef855ee3-2878-8e35-8b99-0000e6382ccd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.121/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f36259c-ce8f-8069-dce1-0000273641db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_mips","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e2664d8-2d1d-8132-f9e0-0000a4700a16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.100/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--944a21a7-4ec3-95b8-adf6-000032d7b3b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c3066e7-8a52-7d64-862a-00004da57f5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_i686","pattern":"[url:value = 'http://94.154.43.46/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc357ab5-68e6-d8de-60fd-0000b4802cf6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.121/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc123291-8df3-cd9d-3c5a-0000166eb2ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.121/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95ffdcba-9d52-b799-b498-00003c305b63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bab5f91e-fa1d-075a-6af0-00009cbbd699","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--146c3b8d-5e50-f1ce-df17-0000652d0f22","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df6b0ef8-422c-1a2f-1b69-00000b42f247","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.46/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c60277d-9297-ebfe-0500-00003f286dbc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a9aeb4b-1c92-a88f-fbab-000025e977c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a89f0e3-449a-d4fd-64ab-0000df0af144","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_i686","pattern":"[url:value = 'http://94.154.43.110/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a33bd06-7001-8fcd-1977-00001e4088b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b50b8a9-e672-bf0a-e5a7-000065a8562e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.125/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f876a28-8649-c618-8af1-00002ee6c757","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.100/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f68a1185-9453-0cce-7e61-00004d3cd51d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client","pattern":"[url:value = 'http://94.154.43.100/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d31a114a-0801-172d-0557-000027c09701","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_m68k","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c22b9440-c46a-264e-a022-00003d7d7ef2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.133/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa24ffd5-5f5f-997c-d85c-0000d013ab7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cbe04ad-a88c-bea9-5e34-00006d63d04e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.46/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--986aeb1f-680a-a9bc-866b-0000f3e1031a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9273af84-cc7a-3777-4f87-0000f2d976c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fd22037-b1e3-6e7a-6edc-0000280b21ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21c9e423-c548-4a49-4db6-000016d7f1ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.129/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a26b8b34-078e-f20f-024d-0000d503f110","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.110/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a168b5ba-3227-75ee-c88b-0000e6648d5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.125/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12eb64ec-e4bc-ecd5-dfe7-000062c7f92b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_m68k","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ab07e0f-81b5-c698-b44e-000085f7e5ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--604c13ab-dab7-923c-41c6-00003fdebb66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b85f0f3-2513-65f2-28c3-0000ca9a1e5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client","pattern":"[url:value = 'http://94.154.43.110/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--003ec575-9e98-d19a-23b8-0000d1a0d1b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b8d5d9b-0fcc-8782-6251-0000992cce50","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cfc628a-5189-11b1-0dfa-0000fb146c66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.46/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5e0fdd2-7a3f-5a95-8e47-00007b63d98d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0495bac6-0ccb-f443-2f41-0000ff1b8ea1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eee2f1f7-5dc5-89e7-f6a6-0000075e73bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c0eafdd-c505-11ff-73f3-0000bf006e60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.125/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cf9397d-6482-bda9-1eb7-000062ba7983","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/micro.sh","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e41e69cb-3a88-0eb8-d71a-000027bcd166","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.100/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bfffe73-6c87-35a0-96ba-000005fcb032","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_mips","pattern":"[url:value = 'http://94.154.43.100/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97f2e20d-3cfb-7066-9638-0000c355d434","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_powerpc","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef6ddb89-9927-0b0d-a7bc-00004b5d647f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bf2ab51-43b8-48f4-eb58-00008748f700","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2140508c-b78a-5398-49b0-0000d03ebbaf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.129/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dabf2d0-fa3e-c57f-d414-00001e7189cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db30a501-6e75-78e1-325f-0000001d5742","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.133/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--725e8851-5225-ba66-3393-0000e6816feb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.129/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16165ced-afc6-86fe-ce21-0000b796a142","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9241f5cb-ce9f-2cb4-3af8-0000019c5863","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d250ad96-8e3a-02e5-70a4-00007d2a126e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4a4ecb9-3fa3-7ae9-a3c8-00001d895bc4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/android.sh","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc9afd21-d5b8-1468-b3c6-00007c318c0f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.110/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27a1694d-5123-3b2b-e55d-000099da188a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8d56315-710f-3724-ab94-000056f23ab2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e245013-88b2-fe11-6030-00006caee18c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.121/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--939cf57d-6ad4-9bff-eca8-0000382d74a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.m68k","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bc8db17-eff6-3b87-78ab-00001a6ca606","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.arm7","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a156224b-e09d-5592-34aa-0000ad0395cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.sh4","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9b6f1d2-7844-41c5-1e65-000055de624c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.x86","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5c6ba3b-694e-65b8-0fb7-0000b0656e8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.arm5","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a620762-dbbb-80b7-817e-000053d8cc39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.mpsl","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--481ad30f-d07b-8e3b-c478-0000a85d6d7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.arm6","pattern":"[url:value = 'http://springnetpm.pro/bins/David.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32dfee23-547b-e989-2cec-000018ecac02","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.arm5","pattern":"[url:value = 'http://94.154.43.97/bins/David.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17e6822e-43e1-66f0-8c63-0000867993d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.spc","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d169c73b-d01c-8531-c613-00006c9dd77b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.arm7","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eb73fec-ff6f-1248-dd8a-000059556027","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.mpsl","pattern":"[url:value = 'http://springnetpm.pro/bins/David.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53957124-4301-0de1-e0b2-00007d7384bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_mipsel","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcd18f0f-490a-6fe1-0717-0000b2e56489","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.arm7","pattern":"[url:value = 'http://94.154.43.97/bins/David.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--493de951-e601-2e38-0fe9-00004edc05d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.m68k","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddcabab5-95fc-3d9b-1bec-000052781414","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.arm","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfb0c1ab-1f72-901d-69c5-000038dba273","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.mips","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--167570c1-f980-4732-1681-00006b4b458a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/ohshit.sh","pattern":"[url:value = 'http://mail.springnetpm.pro/ohshit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fe5b275-038d-42ce-659f-0000a0df35b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.ppc","pattern":"[url:value = 'http://springnetpm.pro/bins/David.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15a03c77-ecad-3423-d728-000000ede179","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.ppc","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6da30c2c-9630-bd81-256a-0000264b4719","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.spc","pattern":"[url:value = 'http://springnetpm.pro/bins/David.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a66ef7ad-d2b0-4750-358b-0000d421b01e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.arm6","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6427e45-6bf6-3cba-0a17-0000ab497e97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.spc","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d404c01c-f379-8d3c-66e8-00002ddd0c39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.ppc","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ab75022-4100-3cca-da96-00002001ac41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.sh4","pattern":"[url:value = 'http://springnetpm.pro/bins/David.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5d0d4aa-2cb6-4cc3-b815-0000431e4f62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.sh4","pattern":"[url:value = 'http://94.154.43.97/bins/David.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0511dd87-b143-25a8-8c54-00004e2ad30e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.mips","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a78f34b7-9ad9-1def-0064-0000f24ac0da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.arm","pattern":"[url:value = 'http://springnetpm.pro/bins/David.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb65f925-db29-af63-9a4e-000032560e6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.mips","pattern":"[url:value = 'http://springnetpm.pro/bins/David.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f67a617-0c5b-33be-0eae-0000c6941ff0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.arm5","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c6e46de-d4af-32d7-04ce-00007f48f954","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.arm","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed300733-43fb-90d5-1902-0000bbc3b8e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.x86","pattern":"[url:value = 'http://94.154.43.97/bins/David.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f1de399-ea51-a9e0-2941-000010e10a18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.arm7","pattern":"[url:value = 'http://springnetpm.pro/bins/David.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6388723-8fff-a7ee-3cec-000092bd0ba3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/ohshit.sh","pattern":"[url:value = 'http://94.154.43.97/ohshit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd6bf99-2b8e-97f6-26a2-00000a5903ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.arm6","pattern":"[url:value = 'http://94.154.43.97/bins/David.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4485a165-b9e4-3595-ad1c-000090a4b626","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.m68k","pattern":"[url:value = 'http://94.154.43.97/bins/David.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2c488a4-10e3-fe75-96af-00004554a43a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.spc","pattern":"[url:value = 'http://94.154.43.97/bins/David.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c08236fd-fc1f-a245-5c0c-0000c3c0d694","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.ppc","pattern":"[url:value = 'http://94.154.43.97/bins/David.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08e8b03f-ef78-fb22-0c77-0000915523f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.arm","pattern":"[url:value = 'http://94.154.43.97/bins/David.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08a995b3-3a9c-0e28-0745-0000905260fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.mips","pattern":"[url:value = 'http://94.154.43.97/bins/David.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--425783bb-7514-8f5c-3066-0000d8dc5bc2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.x86","pattern":"[url:value = 'http://springnetpm.pro/bins/David.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cb7666e-037b-7e27-dc23-0000d09d49b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/ohshit.sh","pattern":"[url:value = 'http://springnetpm.pro/ohshit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d11382b5-b464-2ebb-940d-0000bae8c293","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.arm5","pattern":"[url:value = 'http://springnetpm.pro/bins/David.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6510a26a-96b9-a9b6-7336-000030b0c532","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/ohshit.sh","pattern":"[url:value = 'http://utensil.cleverpondky.com/ohshit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38120db9-3c54-30a2-831f-000078ee8f0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.x86","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0c31b4e-41a4-3a2c-279f-00002529bd44","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.mpsl","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a749cdf3-858c-e92b-9789-000032a0d8b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.m68k","pattern":"[url:value = 'http://springnetpm.pro/bins/David.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd7b537a-4291-a2d8-aa8e-0000fb510eb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.mpsl","pattern":"[url:value = 'http://94.154.43.97/bins/David.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8796ce1b-b32c-667c-d53d-0000a810c509","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ccfeb81-0959-0a51-b7f2-0000a2d0c163","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.arm6","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3b7ff6c-aa9f-61a1-c3d5-0000739aac74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://89.165.130.43:46337/i","pattern":"[url:value = 'http://89.165.130.43:46337/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00f8a3c9-9950-25e7-ef27-00005c447d65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.177.244.151:33507/bin.sh","pattern":"[url:value = 'http://119.177.244.151:33507/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2615abbc-ffb4-5436-7514-0000181cc335","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.177.244.151:33507/i","pattern":"[url:value = 'http://119.177.244.151:33507/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60f2de20-609c-4e8b-1dd0-00008033788f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.sh4","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--291fd51f-bc88-d70a-0a99-0000924b9d65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.154.98.42/ID/ConnectProAgentSetup.msi","pattern":"[url:value = 'http://45.154.98.42/ID/ConnectProAgentSetup.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9723c34-0a89-7a55-cc51-00001aec61a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.154.98.42/ID/id/ConnectProAgentSetup.msi","pattern":"[url:value = 'http://45.154.98.42/ID/id/ConnectProAgentSetup.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bfa3188-443e-205d-85ed-00008065137d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.55.138.2:60455/i","pattern":"[url:value = 'http://42.55.138.2:60455/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2eba55d-57e2-b9a7-58c2-000074ba8ba3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.88/l","pattern":"[url:value = 'http://94.154.43.88/l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b27cc319-a45e-aae8-ba5d-00005ee56479","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.88/arm7","pattern":"[url:value = 'http://94.154.43.88/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5301a540-2d6f-5036-8bdd-0000209bb007","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.173.12.38:48285/i","pattern":"[url:value = 'http://31.173.12.38:48285/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8965f1c1-45e9-7c65-4dac-00005464fc7b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/a.sh","pattern":"[url:value = 'http://94.154.43.244/a.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b027bc5-c83b-37c6-efcc-000041d7d04f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/m68k","pattern":"[url:value = 'http://94.154.43.244/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be675c9b-3ba0-0ae6-f2d3-0000c0e8f4a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/ppc440","pattern":"[url:value = 'http://94.154.43.244/ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3fc7f82-b5c5-79e0-21e1-00000a6b518d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/i586","pattern":"[url:value = 'http://94.154.43.244/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7bdb0b4-4213-390d-5664-00006734725c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/x86_64","pattern":"[url:value = 'http://94.154.43.244/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55b17eec-9087-1dad-009d-00005954bb5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/arm","pattern":"[url:value = 'http://94.154.43.244/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ddbf82e-10a0-86a6-125a-00000bc14e30","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/ppc","pattern":"[url:value = 'http://94.154.43.244/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c23e15b5-5639-9709-21a6-0000c1378228","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/i486","pattern":"[url:value = 'http://94.154.43.244/i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c35655af-033b-930c-7579-0000639602e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/arm7","pattern":"[url:value = 'http://94.154.43.244/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1bac1db-0cda-a15a-c690-00008cff2323","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/i686","pattern":"[url:value = 'http://94.154.43.244/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4516539-061b-7792-f23f-0000db2a6585","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/arm6","pattern":"[url:value = 'http://94.154.43.244/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--236c394a-36cf-0db1-227c-0000c3fbed52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/c.sh","pattern":"[url:value = 'http://94.154.43.244/c.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8891a79-2294-52f9-4c21-00008b1fd7c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/sh4","pattern":"[url:value = 'http://94.154.43.244/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--172e4f13-86bb-a9a1-f47b-000041210695","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/mips","pattern":"[url:value = 'http://94.154.43.244/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2fc89da-84f6-c720-02f0-00002a2268df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/mpsl","pattern":"[url:value = 'http://94.154.43.244/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d583483-8f19-e861-577c-0000c99fca6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/arm5","pattern":"[url:value = 'http://94.154.43.244/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e92a3b41-97f2-63db-399f-00006227845e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/arm6","pattern":"[url:value = 'http://oregano.brightleafrv.com/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc8862c2-8a2b-fd60-fdcf-0000d2f5056b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/x86_64","pattern":"[url:value = 'http://oregano.brightleafrv.com/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94229183-6dfe-a8b4-03cf-0000aa3f1a5c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/m68k","pattern":"[url:value = 'http://load.dstat.top/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cdc95c4-d947-0bf4-bbae-0000e1839b9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/i586","pattern":"[url:value = 'http://load.dstat.top/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70236afb-279d-9dd4-d3cd-000070922bb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/arm5","pattern":"[url:value = 'http://oregano.brightleafrv.com/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72f6c54f-91f5-1062-dd39-00006de3fb03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/sh4","pattern":"[url:value = 'http://load.dstat.top/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46f40416-f49e-74bc-57c3-00003261692b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/arm","pattern":"[url:value = 'http://oregano.brightleafrv.com/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c76bfe9-6bc0-15d7-fc04-0000887ec8f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/arm7","pattern":"[url:value = 'http://load.dstat.top/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e9a2b9d-dd81-d59a-3392-00006717e930","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/i686","pattern":"[url:value = 'http://load.dstat.top/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b718f7f-8814-8684-b3da-000030c2af96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/arm6","pattern":"[url:value = 'http://load.dstat.top/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e278dec5-92be-d61e-1229-000022770078","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/arm5","pattern":"[url:value = 'http://load.dstat.top/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cc19fa3-2a11-2c7f-9c89-000035f2c2f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/i686","pattern":"[url:value = 'http://oregano.brightleafrv.com/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e8721fa-fcf1-163e-0b65-0000b366b056","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/i586","pattern":"[url:value = 'http://oregano.brightleafrv.com/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff87d7a2-6160-14c7-ab2b-0000932f8904","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/mpsl","pattern":"[url:value = 'http://oregano.brightleafrv.com/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbcc6083-1162-a27e-574c-0000e02a05b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/sh4","pattern":"[url:value = 'http://oregano.brightleafrv.com/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ddc639c-c174-fc92-d1d7-0000c1caa2cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/mpsl","pattern":"[url:value = 'http://load.dstat.top/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d80ea555-42d1-3c44-3bc5-0000aac9cc86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/mips","pattern":"[url:value = 'http://load.dstat.top/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d41eafb9-7b41-60e3-7270-0000ed691da0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/a.sh","pattern":"[url:value = 'http://oregano.brightleafrv.com/a.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--589b705e-506d-df95-e57c-0000dab67576","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/ppc440","pattern":"[url:value = 'http://load.dstat.top/ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a42718-6ee2-533f-5a97-0000ed3d62f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/ppc","pattern":"[url:value = 'http://load.dstat.top/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5528eed-340b-e8e9-f1c7-000075298395","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/ppc440","pattern":"[url:value = 'http://oregano.brightleafrv.com/ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d1efff3-819c-9d4e-b19d-00002adf483b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/i486","pattern":"[url:value = 'http://load.dstat.top/i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfcea1da-4052-6786-bf9e-0000bfa89798","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/arm","pattern":"[url:value = 'http://load.dstat.top/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e2d0bd7-0383-8465-65a9-0000da9be33b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/arm7","pattern":"[url:value = 'http://oregano.brightleafrv.com/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--067925bd-d7b4-986a-2881-0000f8da3194","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/m68k","pattern":"[url:value = 'http://oregano.brightleafrv.com/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a55116b-54af-5832-449e-0000f82ce74e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/mips","pattern":"[url:value = 'http://oregano.brightleafrv.com/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f454bcd-e6f0-6de3-2897-0000783a63f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/i486","pattern":"[url:value = 'http://oregano.brightleafrv.com/i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51419c71-a5a4-7752-169b-00007d6af388","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/x86_64","pattern":"[url:value = 'http://load.dstat.top/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e9e82d4-8cdb-3cb9-5c9a-000060f49c46","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/ppc","pattern":"[url:value = 'http://oregano.brightleafrv.com/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46451b87-86fa-14bf-c08c-0000bf8c3668","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/a.sh","pattern":"[url:value = 'http://load.dstat.top/a.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e176732-df47-037c-a79c-00007af60c89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/c.sh","pattern":"[url:value = 'http://oregano.brightleafrv.com/c.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1392af96-ccab-8202-4c62-00003a76d3b1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.169.34:41660/bin.sh","pattern":"[url:value = 'http://42.224.169.34:41660/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dde767f-5082-9eaf-47eb-0000b3d54b1d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.m68k","pattern":"[url:value = 'http://217.60.195.187/boatnet.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b73445db-deee-7746-883e-0000d910d03d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.arc","pattern":"[url:value = 'http://217.60.195.187/boatnet.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--928d6883-bb02-a2cf-d13d-00002928fed7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.arm6","pattern":"[url:value = 'http://217.60.195.187/boatnet.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9aa05047-711a-161c-8707-0000edce20cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.spc","pattern":"[url:value = 'http://217.60.195.187/boatnet.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec4cd30c-7d7f-9fac-ceeb-000028132741","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/c.sh","pattern":"[url:value = 'http://load.dstat.top/c.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b554dfd0-4237-ee81-5d3d-000013593c16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.x86","pattern":"[url:value = 'http://217.60.195.187/boatnet.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edb40c49-3e69-b4ba-7d5a-0000eb84cb95","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.sh4","pattern":"[url:value = 'http://217.60.195.187/boatnet.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98e6ee1e-d4cc-9efe-f947-00006b5a5263","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.ppc","pattern":"[url:value = 'http://217.60.195.187/boatnet.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--508c68dc-51cf-d917-8858-000039cfa70e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.arm","pattern":"[url:value = 'http://217.60.195.187/boatnet.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31f242a9-61e5-84dd-c246-0000b3239dc7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.mips","pattern":"[url:value = 'http://217.60.195.187/boatnet.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84208460-0d44-25a5-a0cd-0000d820f38d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.mpsl","pattern":"[url:value = 'http://217.60.195.187/boatnet.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14922831-e97a-5eae-e134-0000928396df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.arm7","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ba6230a-0cad-8127-1297-000078fdb1bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.arc","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7538f444-9502-3987-ec38-0000db37fce0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.mpsl","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b843939-3d81-4f77-5417-00003b9d5139","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.arm5","pattern":"[url:value = 'http://217.60.195.187/boatnet.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e58a5815-061a-b5c5-d00b-0000919499b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.arm7","pattern":"[url:value = 'http://217.60.195.187/boatnet.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56323696-205e-91d0-d018-00004c23414f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.spc","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--547488cf-7586-8678-73ac-0000cab733e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.ppc","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cc6065b-6e8f-7311-43ea-0000b0c24470","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.m68k","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79c6b901-a5b1-31a9-51d5-0000b2b45d94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.x86","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa9c491d-12b5-3043-ef81-0000388a5e54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.arm5","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21266a98-b8b5-1ba0-36a3-00004a69aa17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.sh4","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0ea328d-0b1a-77f3-0bff-0000b03492aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.mips","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c1e0e0d-f4f9-e5a8-7d4d-00009822c68c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.arm","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--639518a7-b4ef-5735-ce2b-00002a3ff1ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.arm6","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a35cb9a5-52f3-a7d3-5775-00007c1fd2a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://162.255.251.91:50087/bin.sh","pattern":"[url:value = 'http://162.255.251.91:50087/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5072181-864d-4c09-091c-0000067ab4ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.180.66/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://130.12.180.66/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbe0c950-8503-3c6e-456a-000022f8e59a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.180.67/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://130.12.180.67/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc0eeb34-f2e9-f8b4-8382-00008d260f0e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.241.104/svchost.exe","pattern":"[url:value = 'http://217.60.241.104/svchost.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bb6ef8e-28b9-71be-ca98-0000e4398ae5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.253.48:55721/i","pattern":"[url:value = 'http://182.121.253.48:55721/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aae77c91-e95a-21fc-065b-0000b543d6e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://162.255.251.91:50087/i","pattern":"[url:value = 'http://162.255.251.91:50087/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2310fb0-ae29-af4c-65cc-0000e76ea7f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://104.239.66.207/s.ps1","pattern":"[url:value = 'http://104.239.66.207/s.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a965669-6a8c-efb6-f856-000046fd79d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://baltos.online/asset/update.dat","pattern":"[url:value = 'http://baltos.online/asset/update.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08890af3-d433-786b-2676-00002d7f5b21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.58.252:48725/i","pattern":"[url:value = 'http://182.119.58.252:48725/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1067a4a8-e095-3a1a-004f-00003aa0c470","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.169.34:41660/i","pattern":"[url:value = 'http://42.224.169.34:41660/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa58fb56-f2f3-8adc-e558-00000ebff6e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.17.89.214:45559/bin.sh","pattern":"[url:value = 'http://60.17.89.214:45559/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0135ad7f-5485-5ff3-d708-0000e6c16c45","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.228.252.188:39953/bin.sh","pattern":"[url:value = 'http://42.228.252.188:39953/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa41377d-2d2a-a3ee-6ef9-000039836f65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.ppc","pattern":"[url:value = 'http://94.154.43.95/manji.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e52bd592-b4dc-fa92-4c04-00005a12e1cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.mips","pattern":"[url:value = 'http://94.154.43.95/manji.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a85a9e94-9361-3fca-009a-00006a104a54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.arm4","pattern":"[url:value = 'http://94.154.43.95/manji.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f13d52a-e7cb-f3c2-410b-0000b95df693","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.sh4","pattern":"[url:value = 'http://94.154.43.95/manji.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7f306b3-1147-7143-a1b5-000041800110","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.x86","pattern":"[url:value = 'http://94.154.43.95/manji.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df5dae02-574c-64c1-f115-0000d2ac2d31","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.arm5","pattern":"[url:value = 'http://94.154.43.95/manji.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50f9135b-9bf6-3e37-6431-000031118f85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.mpsl","pattern":"[url:value = 'http://94.154.43.95/manji.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4654ffb8-2c0b-998b-c1f3-0000c01982df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.arm6","pattern":"[url:value = 'http://94.154.43.95/manji.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a907e144-3112-66e3-7053-00005ae43715","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.m68k","pattern":"[url:value = 'http://94.154.43.95/manji.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3153cf2e-d579-f5b3-01e2-000078a5e5ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.arm7","pattern":"[url:value = 'http://94.154.43.95/manji.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--303b8f34-8e15-0f91-2418-0000da046572","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.i486","pattern":"[url:value = 'http://94.154.43.95/manji.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c257dce-6520-b0c8-6ac8-0000bed22d94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.ppc440","pattern":"[url:value = 'http://94.154.43.95/manji.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51a213df-08bf-7845-ae14-00002b94b4a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.arm5","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26a52349-bf90-4566-9a26-00009328d3c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.arm4","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8ab4265-36ad-742b-5048-000039211b4a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.arm6","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33bf5b5a-3698-bb98-4012-000097ccc479","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.i686","pattern":"[url:value = 'http://94.154.43.95/manji.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bd4684f-aaed-44fa-45ee-0000a32a785a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.mips","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce41f1b7-5adc-6e3f-bad9-0000381b0c0f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.sh4","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27f85c99-85ac-faa7-5beb-0000a3dcae80","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.m68k","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f65a711-6c45-dc14-ed82-0000350c332f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.arm6","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb1313e0-5ee6-b371-b363-0000b8c595f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.ppc","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de06ae86-7cae-b238-1af6-0000c8291610","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.mpsl","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd40e687-8a4a-5642-1479-00006ef45dec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.i686","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d638752-b686-4f28-4000-00003b378113","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.ppc440","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bec432e9-0b9f-8923-2bcb-0000233cfce7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.i486","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96a1222e-167a-ea92-29e4-0000c0c6fb8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.x86","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfac72f3-3362-eec7-7511-0000819d7c2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.arm7","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a8e03f3-6151-868a-e087-000062d97589","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.i686","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea6fba96-c55a-6290-1568-0000cecfbbfd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.x86","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--490ad79d-d568-2445-f668-00002f11d482","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.i486","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d16bc63d-fcc5-933b-8a29-00009f05fba4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.arm4","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--036ac723-25cc-728a-0a47-0000e7a174db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.ppc440","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29c84bf2-c14b-7977-f713-0000c4043e75","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.mpsl","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a6a87d5-17b4-f076-dd94-0000a69134c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.arm7","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7dd8b58-a3bb-b7c6-2aec-0000b6ccd588","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.ppc","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9464e6f9-31bd-b992-cdbf-00000c98fc4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.arm5","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b28f690f-726b-1782-100a-000036124c7e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.sh4","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9650da99-de6e-31f7-db86-00001608ba26","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.ppc440","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48629787-c034-5e31-d3a6-00008db0544a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.arm7","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d036b9ed-22f3-6fcf-4eb0-0000aff186e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.m68k","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c1a8d3b-7a52-ebe9-29e2-0000af07503f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.mips","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a130bba-baa1-dfea-7b66-00005bf5a647","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.x86","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e363d66f-1ce7-20c2-63b1-0000b4249b2b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.arm4","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bc05ba0-2f05-8302-25f6-0000ef255efa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.mpsl","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d6db743-7797-4e44-636f-00001e2d53a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.arm6","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62f3d823-aeb4-545a-bdc5-0000a32851c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.sh4","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae129d69-0072-2d99-6692-0000842630b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.mips","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e23ea9bf-fa83-28c7-9ada-000084d0e66a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.m68k","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--788613a1-d201-2db0-27b6-000049f81506","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.i686","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a66cf6ab-c80c-0456-2f72-000027b99cc1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.arm5","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17a13a74-2adc-607f-f08d-000023f6c832","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.ppc","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b02c7cf-229e-ac0b-52fd-00000430b40d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.i486","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--698787dc-19a8-ebb8-95c8-000077fb919c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.17.89.214:45559/i","pattern":"[url:value = 'http://60.17.89.214:45559/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91ecc9ed-2ebb-a16a-b334-0000e6c8c498","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.12.92:36844/bin.sh","pattern":"[url:value = 'http://123.11.12.92:36844/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--741b9a61-c20b-a52f-874f-0000bca84fb1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.9.22:56917/bin.sh","pattern":"[url:value = 'http://125.41.9.22:56917/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1811b448-619a-d68a-5231-0000514f19a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"ip: 41.216.189.236","pattern":"[ipv4-addr:value = '41.216.189.236']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d6aa69a-1595-881e-27a6-000011f8ea0a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"ip: 41.216.189.92","pattern":"[ipv4-addr:value = '41.216.189.92']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca582c07-90e5-6845-47e1-0000d87a8351","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"ip: 91.92.42.213","pattern":"[ipv4-addr:value = '91.92.42.213']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d7d582a-efe6-48a6-a091-00009d7a5c48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/sysorbit.apk","pattern":"[url:value = 'http://94.154.43.244/sysorbit.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8deefa78-31ce-612a-fdb6-00000775ba83","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.202.198:40071/i","pattern":"[url:value = 'http://115.49.202.198:40071/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1503ccc-d776-a69f-6f6d-0000745b0230","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.12.92:36844/i","pattern":"[url:value = 'http://123.11.12.92:36844/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9adbaad3-881f-8eda-afd7-00003e509162","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/mipsel","pattern":"[url:value = 'http://94.154.43.244/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b89bfa20-c992-7316-e03c-000045b5400d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d54145","pattern":"[url:value = 'http://5.182.210.174/d54145']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fbc2810-2ccf-8fe5-b94d-000077dab7ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.x86_64","pattern":"[url:value = 'http://94.154.43.97/bins/David.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef509d38-d2e6-05ca-e8c6-0000718a54ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.arc","pattern":"[url:value = 'http://94.154.43.97/bins/David.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6fce526-fee2-e6b8-1e95-00005fb4c6c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.mips64","pattern":"[url:value = 'http://94.154.43.97/bins/David.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab77eedb-6131-9808-8f9b-00007b36a529","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d6b53f","pattern":"[url:value = 'http://5.182.210.174/d6b53f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de3d1b7b-e702-ff64-9e02-00005d8c454a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.i686","pattern":"[url:value = 'http://94.154.43.97/bins/David.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73a6b753-1856-e785-ee8b-00000ebdeb96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1d6369","pattern":"[url:value = 'http://5.182.210.174/1d6369']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--586d2727-9a21-1d4f-b759-000020b2ba13","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bae1f5","pattern":"[url:value = 'http://5.182.210.174/bae1f5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d2801fd-28a2-5d8c-9786-000065c43ceb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2c5700","pattern":"[url:value = 'http://5.182.210.174/2c5700']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25230d6b-a8ec-8072-268c-0000a73d6e75","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c085b3","pattern":"[url:value = 'http://5.182.210.174/c085b3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1034d35a-12a2-a438-04fe-00001efc8cb1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9a19b5","pattern":"[url:value = 'http://5.182.210.174/9a19b5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec00727f-0e8e-4e93-5a13-0000b6d2715b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b7ecfa","pattern":"[url:value = 'http://5.182.210.174/b7ecfa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ba98bf1-1828-b0d7-f811-0000370d061e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/5b5d99","pattern":"[url:value = 'http://5.182.210.174/5b5d99']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c09d59c0-9b15-0416-6cc0-0000801edaca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/734ef2","pattern":"[url:value = 'http://5.182.210.174/734ef2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2e75d3c-018a-84a5-ab8e-0000e87c0d3a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.sparc","pattern":"[url:value = 'http://94.154.43.97/bins/David.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49190e27-1d9c-1367-8afd-0000339c90cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/607754","pattern":"[url:value = 'http://5.182.210.174/607754']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fbfec5e-df9f-b56c-d27c-00003b4154d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6af350","pattern":"[url:value = 'http://5.182.210.174/6af350']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd6c48fa-6c7d-54e6-4726-000030815b1b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.mips","pattern":"[url:value = 'http://45.207.196.86/iran.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b03ad97-fb97-eb52-d972-00008e8a784e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.mipsel","pattern":"[url:value = 'http://45.207.196.86/iran.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dedf8841-c943-e9d3-93ed-000060187f81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.armv6l","pattern":"[url:value = 'http://45.207.196.86/iran.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4f0d419-23a4-56a6-3cb4-0000bf682f82","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.aarch64","pattern":"[url:value = 'http://45.207.196.86/iran.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90b66a80-8810-d89c-9cab-0000a853cb2a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.arc","pattern":"[url:value = 'http://45.207.196.86/iran.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca362312-2469-1796-1c2e-00009ac7d082","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.sh4","pattern":"[url:value = 'http://45.207.196.86/iran.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a665b7f0-cc57-6a83-e2b4-0000d7ee9b70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.x86_64","pattern":"[url:value = 'http://45.207.196.86/iran.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81407c2c-dfbc-ccf1-4d27-000030778dc1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.m68k","pattern":"[url:value = 'http://45.207.196.86/iran.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ece9eac3-017e-a5c9-9d6a-00001ad82ce1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.armv4l","pattern":"[url:value = 'http://45.207.196.86/iran.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad2261d5-b7bd-a011-1dd6-0000d6b2a9da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.sparc","pattern":"[url:value = 'http://45.207.196.86/iran.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7c4b900-5111-1e51-4127-00005d785631","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.armv7l","pattern":"[url:value = 'http://45.207.196.86/iran.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5f2db82-5a8b-451e-3c59-000027b80551","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.armv5l","pattern":"[url:value = 'http://45.207.196.86/iran.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--187c125c-858b-4479-477c-0000b097dfa6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.i486","pattern":"[url:value = 'http://45.207.196.86/iran.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--742e790e-4585-2fa6-3c80-0000dcc3a7a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/sparc","pattern":"[url:value = 'http://94.154.43.244/sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b20953eb-1098-9fbc-eb99-0000b98bcc6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/arc","pattern":"[url:value = 'http://94.154.43.244/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8045f8cd-31c9-3e33-1be5-0000b7d29e97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.powerpc","pattern":"[url:value = 'http://45.207.196.86/iran.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62dbd901-e6b5-ea71-b28b-0000b44f5af1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.82.251:44283/i","pattern":"[url:value = 'http://112.248.82.251:44283/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51e5c409-545a-1481-4bd0-000084517acd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/telnet.sh","pattern":"[url:value = 'http://45.207.196.86/telnet.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43f15af5-4642-f1dd-0d38-0000cd978382","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://45.207.196.86/cat.sh","pattern":"[url:value = 'http://45.207.196.86/cat.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71df967a-d637-03cc-3f93-00009c674a80","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.mipsrouter","pattern":"[url:value = 'http://45.207.196.86/iran.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc1c3d8e-55db-a60e-18f8-000061346719","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/bins/i686","pattern":"[url:value = 'http://45.207.196.86/bins/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--540b2dfd-87db-a214-5e98-0000fe92261e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/bins/spc","pattern":"[url:value = 'http://45.207.196.86/bins/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32fb2cc2-e76c-49be-da0d-000075034788","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/bins/dbg","pattern":"[url:value = 'http://45.207.196.86/bins/dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63dcfd6c-28e6-3616-f0c8-00009bcc7686","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.9.22:56917/i","pattern":"[url:value = 'http://125.41.9.22:56917/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0337cd08-4c51-a5f9-c9dc-00003c8c1819","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://backup.tkspr1v.com/JQxpNSNuIKQ90.bin","pattern":"[url:value = 'http://backup.tkspr1v.com/JQxpNSNuIKQ90.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96c95c9e-d894-d382-5dbf-0000f74db88e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.96.136.41:41095/bin.sh","pattern":"[url:value = 'http://59.96.136.41:41095/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cab9c112-afad-9325-fb27-00008b88df5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d0ab28","pattern":"[url:value = 'http://5.182.210.174/d0ab28']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3db312c7-e5bb-d65f-d7ef-00004a0a57b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3cd35f","pattern":"[url:value = 'http://5.182.210.174/3cd35f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2538ecee-d60b-4538-6b97-00008dc3bc5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/552ff2","pattern":"[url:value = 'http://5.182.210.174/552ff2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--664fd96a-ebc3-94f1-1497-000007af2969","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/xzOQ","pattern":"[url:value = 'http://129.121.114.124/xzOQ']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--074691bb-64aa-3a7c-d7c9-0000ca980ba6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e78460","pattern":"[url:value = 'http://5.182.210.174/e78460']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07c1586a-a031-fe8c-0444-00002f372e25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/475040","pattern":"[url:value = 'http://5.182.210.174/475040']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd5bf961-3e73-4829-f8f6-000084a4368c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/5S4","pattern":"[url:value = 'http://129.121.114.124/5S4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eea3305b-f5e2-8196-dd08-0000040640b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/Mxx","pattern":"[url:value = 'http://129.121.114.124/Mxx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--561b2aca-560e-ebe0-5980-00008d4053aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/096459","pattern":"[url:value = 'http://5.182.210.174/096459']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37d5040e-7212-112b-a2e8-00006c3d8bcc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/TXA","pattern":"[url:value = 'http://129.121.114.124/TXA']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b2066d0-3a80-f9a8-4a34-000071369cfc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/Hxqh","pattern":"[url:value = 'http://129.121.114.124/Hxqh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43984f63-c65f-4249-128d-000037d27828","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/be3b0c","pattern":"[url:value = 'http://5.182.210.174/be3b0c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f6651a4-02cc-9ef2-cf66-00002d7618f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/013767","pattern":"[url:value = 'http://5.182.210.174/013767']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd1ce658-738f-43ab-a6eb-00008afc323e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/8e9d9e","pattern":"[url:value = 'http://5.182.210.174/8e9d9e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cf5e905-4022-01a7-76fb-0000b0d6c90f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2de858","pattern":"[url:value = 'http://5.182.210.174/2de858']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83939563-3995-612b-cd63-0000dbd78cf5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/77fda1","pattern":"[url:value = 'http://5.182.210.174/77fda1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85b582aa-47e2-a624-e3ec-000092272057","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ad49f7","pattern":"[url:value = 'http://5.182.210.174/ad49f7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d665bcf9-a112-cf32-af0c-00003bcb7944","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/actami.exe","pattern":"[url:value = 'http://95.164.53.193:5001/actami.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03061762-18b9-035e-a3c7-000053c57b40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/uos.bin","pattern":"[url:value = 'http://95.164.53.193:5001/uos.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cdfc086-66dc-a8fe-e214-0000cc583a1b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/heras.exe","pattern":"[url:value = 'http://95.164.53.193:5001/heras.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20480018-a461-7410-4397-00009e447ee4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/tris.exe","pattern":"[url:value = 'http://95.164.53.193:5001/tris.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca129c81-f445-3eee-1051-00003acc808d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.ppc","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf407ed6-0c08-3fe7-0cc6-0000ba12197b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.sh4","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4c2fec7-84f4-99b6-058d-00009fc3aa20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.mpsl","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86b07e09-8310-2507-e7de-0000817a9953","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.x86_64","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b66439e-db7a-8733-4197-00007c7e0894","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm5","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5c03744-9ef1-a45d-48c5-0000888602d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arc","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7a0ad4f-b280-0a17-2d10-000042cfeef8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.x86","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c85422d8-c472-8d5a-f5e7-0000bc58f223","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.spc","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d3c0cd8-69db-f6ef-0375-0000f43612b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.m68k","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8784b6c6-6d5e-caac-f009-0000391ee1dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.i686","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f26f1224-72f5-caa0-e659-00006ecba77a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm6","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19030031-dbba-11c0-9113-000048d69baa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz.sh","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62da21fa-6dcb-4344-8784-0000a6bc9de3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/debug","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/debug']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5110380e-d526-6881-eb7d-0000f4c0c46a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.mips","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--856822b2-0380-b12f-095c-0000d677c01f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm7","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02781a43-df10-82d9-5105-0000685975e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86bcb40a-ff97-f5c6-5e08-0000bb9f54e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.36.226:37513/bin.sh","pattern":"[url:value = 'http://182.116.36.226:37513/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4569682-9ad6-831b-1d14-0000b3d453a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://github.com/Seung90912/sad23213zxc/raw/refs/heads/main/freebobux.exe","pattern":"[url:value = 'https://github.com/Seung90912/sad23213zxc/raw/refs/heads/main/freebobux.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad8067fc-4224-f989-5934-00008facb1f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/slim.mips","pattern":"[url:value = 'http://95.155.151.113/d/slim.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--637e6cdd-640e-4794-32b6-00000fd29b3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.36.226:37513/i","pattern":"[url:value = 'http://182.116.36.226:37513/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34ea35a1-566e-d8dc-15cd-0000ce22bb1d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/gpon.sh","pattern":"[url:value = 'http://95.155.151.113/gpon.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e01741cf-afd7-bd06-236f-000004346fb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/single.exe","pattern":"[url:value = 'http://95.164.53.193:5001/single.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2b42231-72de-0deb-765d-0000ba61fb6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/lol.exe","pattern":"[url:value = 'http://95.164.53.193:5001/lol.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34f079e3-9f29-3dbc-ea0f-00001c921bc0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/term.exe","pattern":"[url:value = 'http://95.164.53.193:5001/term.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2baf9418-66a3-0f02-bfc4-0000b507462a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/slim.arm","pattern":"[url:value = 'http://95.155.151.113/d/slim.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b4d9fd5-1e63-4e98-9c4d-000081801916","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/babust.exe","pattern":"[url:value = 'http://95.164.53.193:5001/babust.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cc0af7b-6748-c491-007e-00001e29a0a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/ntmyebewekca.exe","pattern":"[url:value = 'http://95.164.53.193:5001/ntmyebewekca.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5cb21ac-1178-f473-0cce-0000a43def94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/msis.exe","pattern":"[url:value = 'http://95.164.53.193:5001/msis.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e02b01bb-be7b-f1f5-717d-000088da9cbe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/anfo.exe","pattern":"[url:value = 'http://95.164.53.193:5001/anfo.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d5286d4-8af7-2005-9dc4-0000964ad70a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/dt.bin","pattern":"[url:value = 'http://95.164.53.193:5001/dt.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70488358-501c-2cae-06e9-0000fe7038fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/suza.exe","pattern":"[url:value = 'http://95.164.53.193:5001/suza.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0cf350b-b200-3552-6940-000051c9b778","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/jhgjse.exe","pattern":"[url:value = 'http://95.164.53.193:5001/jhgjse.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c7c6a32-7e3d-6dd6-ba85-00001538ca66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/maya.exe","pattern":"[url:value = 'http://95.164.53.193:5001/maya.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21401676-de6b-63ef-09f0-0000ce4ea52a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/mina.exe","pattern":"[url:value = 'http://95.164.53.193:5001/mina.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c64475be-11f7-932e-c4d8-0000184f9e48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/ados.exe","pattern":"[url:value = 'http://95.164.53.193:5001/ados.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc4e14ce-8b43-cbf5-dc9b-0000d08d45da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/adas.exe","pattern":"[url:value = 'http://95.164.53.193:5001/adas.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1852a135-fe8b-efeb-512b-0000e4afdfbd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/slim.mpsl","pattern":"[url:value = 'http://95.155.151.113/d/slim.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79f87d40-1c92-9e5a-046b-0000ad1bb582","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/slim.arm7","pattern":"[url:value = 'http://95.155.151.113/d/slim.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--457827c0-485b-c5ef-ea9d-0000e1c298c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/realtek.sh","pattern":"[url:value = 'http://95.155.151.113/realtek.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c089394-b464-ed32-7830-00005adb04f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/slim.arm64","pattern":"[url:value = 'http://95.155.151.113/d/slim.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6d6bf15-3cd3-10d0-2c24-0000e276e105","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/dit.bin","pattern":"[url:value = 'http://95.164.53.193:5001/dit.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--faf216d0-1541-2bf5-7dbb-000036d45683","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.42.13.21:45097/bin.sh","pattern":"[url:value = 'http://125.42.13.21:45097/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52262f23-bd9c-4fce-7cb6-00000e6c00d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.219.81:55457/i","pattern":"[url:value = 'http://125.44.219.81:55457/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3941a9d-ce5c-0430-6db4-000046f2c348","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.47.176:47866/bin.sh","pattern":"[url:value = 'http://42.230.47.176:47866/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d356b42e-a0d9-aef9-ae3e-0000c404b1ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.169.46:45542/bin.sh","pattern":"[url:value = 'http://115.56.169.46:45542/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cad5293-1c46-b5cd-9abe-00002bc9a388","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.234.218:36909/i","pattern":"[url:value = 'http://115.52.234.218:36909/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac355db3-637f-b35b-6eca-00006ac8e271","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ClashRoyalV2.apk","pattern":"[url:value = 'http://64.89.163.215/bins/ClashRoyalV2.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--790121e6-254e-787a-1ee1-0000a281ccb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.mips","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad793b5a-c8d2-4718-59b5-00008036c8c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.arm7","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da7e0bcc-7e9d-eaeb-27bc-0000388aafa0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.arm6","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f401db77-7dfe-0fac-0f3f-0000b00317cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.x86","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61beeba8-695a-f1eb-ca52-0000b24efdbb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.arm64","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43775a76-ee91-1656-0182-00002a3f004e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.arm5","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--591a9d5b-9a6e-2191-a57c-0000ad12898b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.mipsel","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--848c97d5-0b07-ff4a-449a-0000a53a6127","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.x64","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dafdd1e-01a0-f577-5fe3-00009031cef2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.42.13.21:45097/i","pattern":"[url:value = 'http://125.42.13.21:45097/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7a6a587-bc76-79c6-2c30-0000fcc9067d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.169.46:45542/i","pattern":"[url:value = 'http://115.56.169.46:45542/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20331d94-4990-6573-0735-00004ed058a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.4.234.31:58798/bin.sh","pattern":"[url:value = 'http://123.4.234.31:58798/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28b839f6-3be8-a9ec-b2c3-00008e01fce0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.23.194.16:48972/bin.sh","pattern":"[url:value = 'http://60.23.194.16:48972/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2165dfeb-944c-2243-f194-00006ab936c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.196.19:60380/bin.sh","pattern":"[url:value = 'http://182.119.196.19:60380/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ecfb8cf-de50-3dd9-f8ed-000049426f4c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.196.19:60380/i","pattern":"[url:value = 'http://182.119.196.19:60380/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--771da6c2-cf5c-445a-3548-0000fd067041","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.231.88.234:60432/i","pattern":"[url:value = 'http://42.231.88.234:60432/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32f6032d-78de-8eda-d452-0000bb1094c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.175.92.119:49061/bin.sh","pattern":"[url:value = 'http://175.175.92.119:49061/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1cdf037-e3d9-a86e-2b17-0000243be9ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.157.40:59329/bin.sh","pattern":"[url:value = 'http://123.5.157.40:59329/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca51ecdc-8e5b-8013-4428-00009e4254b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://github.com/BeamChunin42/jennymod-installer/releases/download/latest/JennyMod.zip","pattern":"[url:value = 'https://github.com/BeamChunin42/jennymod-installer/releases/download/latest/JennyMod.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f46a468e-b1aa-7e2e-0065-000014991315","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.237.126:41063/bin.sh","pattern":"[url:value = 'http://61.53.237.126:41063/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd91b676-a0dd-8988-71fe-0000919dfb6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/AlinRight93/stalzone-tools-cheat-2026/releases/download/release/Stalzone.v1.6.by.Kernel.Labs.zip","pattern":"[url:value = 'https://github.com/AlinRight93/stalzone-tools-cheat-2026/releases/download/release/Stalzone.v1.6.by.Kernel.Labs.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--659acb1b-a461-7ed7-4b29-0000dcd17d85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/Alomonohom6/stalzone-cheat-2026/releases/download/release/Release.v.3.1.4.zip","pattern":"[url:value = 'https://github.com/Alomonohom6/stalzone-cheat-2026/releases/download/release/Release.v.3.1.4.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40e0329c-9bf4-d0ef-8bba-00004d05b273","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://github.com/CoopeRlOq9/Project-Zomboid-Build-42-Map/releases/download/release/Release.v.1.3.8.zip","pattern":"[url:value = 'https://github.com/CoopeRlOq9/Project-Zomboid-Build-42-Map/releases/download/release/Release.v.1.3.8.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fbc48f3-1be6-4129-6b1d-0000b983b2b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://github.com/BlackSuite999/Fishstrap-Roblox-2026/releases/download/release/Release.v.1.3.8.zip","pattern":"[url:value = 'https://github.com/BlackSuite999/Fishstrap-Roblox-2026/releases/download/release/Release.v.1.3.8.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c15ad551-172d-4495-14f5-0000eef98858","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://github.com/Shapecluneedle/jubilant-engine/releases/download/exec/payl.exe","pattern":"[url:value = 'https://github.com/Shapecluneedle/jubilant-engine/releases/download/exec/payl.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f12a9e90-16bc-4c83-52aa-00003d1c93ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://github.com/Shapecluneedle/jubilant-engine/releases/download/exec/payd.exe","pattern":"[url:value = 'https://github.com/Shapecluneedle/jubilant-engine/releases/download/exec/payd.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b5b7cf9-60b6-f6f6-3c8d-00003150b31c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/ThreadColonelSouk/release/releases/download/release/release.zip","pattern":"[url:value = 'https://github.com/ThreadColonelSouk/release/releases/download/release/release.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4096a64d-6422-d265-7ec8-00006d057663","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://204.44.69.222/73/gooddaycomingforu.hta","pattern":"[url:value = 'http://204.44.69.222/73/gooddaycomingforu.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e5a60c2-b045-5545-2ff9-0000881ed4c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.157.40:59329/i","pattern":"[url:value = 'http://123.5.157.40:59329/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bc5ba36-6492-8097-4a7a-000021b4ac9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.237.126:41063/i","pattern":"[url:value = 'http://61.53.237.126:41063/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--562fd81d-89b7-0bf2-2ae2-000002b80795","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.175.92.119:49061/i","pattern":"[url:value = 'http://175.175.92.119:49061/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c1b3ba8-1987-b2f8-ecd9-000095ca6fbe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.197.125:40668/bin.sh","pattern":"[url:value = 'http://115.55.197.125:40668/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48233fac-a4b1-fa42-d0ae-0000deadbaac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.31.103.204:36161/i","pattern":"[url:value = 'http://103.31.103.204:36161/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a476915-1401-1cfd-5938-0000b21c20f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.139.121:34906/bin.sh","pattern":"[url:value = 'http://120.28.139.121:34906/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--982a1951-1953-8d39-3039-0000d9b3617f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.97.94.72:56444/bin.sh","pattern":"[url:value = 'http://123.97.94.72:56444/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2008528-dfef-e918-4d0c-000084dc3e4a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.213.5:42072/bin.sh","pattern":"[url:value = 'http://120.84.213.5:42072/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5bfa0a7-8e40-ebab-b98d-0000dd981c5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.223.157:48528/bin.sh","pattern":"[url:value = 'http://219.155.223.157:48528/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09c8dc78-12ed-0ad8-57e3-000016a6bcde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.70.209:50318/bin.sh","pattern":"[url:value = 'http://182.116.70.209:50318/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4188523a-4d96-91dd-d5a6-0000b664116d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.139.121:34906/i","pattern":"[url:value = 'http://120.28.139.121:34906/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79861c5a-09f2-19e0-d775-000077f195f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.223.157:48528/i","pattern":"[url:value = 'http://219.155.223.157:48528/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26bd3630-624e-f28c-ed93-0000ecd1fe5c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.82.251:44283/bin.sh","pattern":"[url:value = 'http://112.248.82.251:44283/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3717554-7b0c-8252-6a44-0000ea890f18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.213.5:42072/i","pattern":"[url:value = 'http://120.84.213.5:42072/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73b7c302-ecd5-d551-cf62-000042203311","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.79.182:51273/i","pattern":"[url:value = 'http://123.12.79.182:51273/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec0f48ce-1c18-4369-62fc-0000c7582694","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.209.189:46958/i","pattern":"[url:value = 'http://115.49.209.189:46958/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ec58e27-b7ff-0d81-4597-0000877a96af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.89.134:36799/bin.sh","pattern":"[url:value = 'http://42.235.89.134:36799/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90ecc302-b8de-ac6f-6b36-0000be99bb8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.224.38.199:36695/i","pattern":"[url:value = 'http://105.224.38.199:36695/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de5bfc79-df3f-eb3f-6771-0000ebe63062","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.113.143:47041/i","pattern":"[url:value = 'http://115.55.113.143:47041/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4771ec2e-7194-b4d0-4750-0000136cd349","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.89.134:36799/i","pattern":"[url:value = 'http://42.235.89.134:36799/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45dc5961-1d05-d813-8eb6-0000597f9c1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.151.82.88:52513/bin.sh","pattern":"[url:value = 'http://175.151.82.88:52513/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa0f2b3d-5872-4ee0-0abb-00003e0ad33f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.60.215:54523/bin.sh","pattern":"[url:value = 'http://42.237.60.215:54523/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c2121b1-cd18-dc5b-12ae-0000f01cd428","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.234.218:36909/bin.sh","pattern":"[url:value = 'http://115.52.234.218:36909/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2079433-4a10-e420-2d53-00005912c418","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.59.22.163:43214/bin.sh","pattern":"[url:value = 'http://115.59.22.163:43214/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d940a605-81c3-60d9-568c-00007c3cdd63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://163.142.95.105:38525/i","pattern":"[url:value = 'http://163.142.95.105:38525/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a19181-7161-7548-f1a0-0000dd0a1c3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.219.74.117:52755/bin.sh","pattern":"[url:value = 'http://222.219.74.117:52755/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9529f71-9183-d48d-932e-0000d2f9e10d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.59.22.163:43214/i","pattern":"[url:value = 'http://115.59.22.163:43214/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcb9076c-b535-3d40-38b7-00004847eaf9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.160.130.178:50403/i","pattern":"[url:value = 'http://103.160.130.178:50403/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dca7d5ef-0150-6b01-bcde-0000e235d5fe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.107.216:48024/i","pattern":"[url:value = 'http://42.233.107.216:48024/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3bc3d20-36ab-595b-bbef-00006404b494","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.131.159:42876/i","pattern":"[url:value = 'http://123.129.131.159:42876/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84898cff-17f5-fdf5-aff3-000049bc9d04","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/files/5223853602/uDSthxb.exe","pattern":"[url:value = 'http://62.60.226.140/files/5223853602/uDSthxb.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b481a43-fd4e-e582-0f3e-00004e804575","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/files/1781548144/Ql0IJZ0.exe","pattern":"[url:value = 'http://62.60.226.140/files/1781548144/Ql0IJZ0.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f6ee341-8b0a-31ae-c7f7-00005a774e06","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.253.29.68:48477/bin.sh","pattern":"[url:value = 'http://117.253.29.68:48477/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72bcc0df-0697-3faf-ba7f-00007b8e1f38","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.138.43:33994/i","pattern":"[url:value = 'http://61.52.138.43:33994/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54449a18-cc37-3d97-227d-00001c5c502b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.193.250:53397/i","pattern":"[url:value = 'http://115.49.193.250:53397/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97c01272-bd2e-3d5c-5966-000040934b64","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.8.86:51962/i","pattern":"[url:value = 'http://115.63.8.86:51962/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c27bb668-06b6-dfe7-473d-0000c7fa7e7e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.189.22.51:43030/bin.sh","pattern":"[url:value = 'http://123.189.22.51:43030/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb0c3844-bfad-33cb-bce2-00009dcc90a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.253.29.68:48477/i","pattern":"[url:value = 'http://117.253.29.68:48477/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--807d02a7-921f-cac0-c0ed-000034c361c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.83.6:56719/bin.sh","pattern":"[url:value = 'http://112.248.83.6:56719/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6f7c0ae-47f3-3520-50f6-0000cfb385e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.227.204.129:58208/bin.sh","pattern":"[url:value = 'http://42.227.204.129:58208/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--845b34f5-a409-0b8e-9de6-000000ea8f9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/bbc","pattern":"[url:value = 'http://94.183.233.225/bbc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23516972-8fb9-4936-a484-00000b50483f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.83.6:56719/i","pattern":"[url:value = 'http://112.248.83.6:56719/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--412b8636-5b58-2181-371b-000015f51a40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_aarch64","pattern":"[url:value = 'http://94.183.233.225/data_aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03e80745-1339-bf32-4ef6-000063b7f60b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.231.36:48526/bin.sh","pattern":"[url:value = 'http://110.39.231.36:48526/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8c39f21-ccc0-4b32-b3e5-0000394d6c1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.136.49.183:57439/bin.sh","pattern":"[url:value = 'http://61.136.49.183:57439/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94da5229-6f00-939f-44d7-00002d613c49","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.217.3.109:54209/i","pattern":"[url:value = 'http://27.217.3.109:54209/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9b7b231-9632-517d-4be2-0000522920e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.136.49.183:57439/i","pattern":"[url:value = 'http://61.136.49.183:57439/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab90e79e-f3c0-5d85-d4e1-0000e2cb2690","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.231.36:48526/i","pattern":"[url:value = 'http://110.39.231.36:48526/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e350e8e0-0f00-3b23-be9a-0000a058bdfd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.54.132.26:37475/i","pattern":"[url:value = 'http://115.54.132.26:37475/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b10d02a-0cbc-db51-7ba3-00005d2353c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.228.209.236:56903/bin.sh","pattern":"[url:value = 'http://113.228.209.236:56903/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c264aee-b460-ff4b-9794-00008f919a0a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://triflackcom.com/main2.exe","pattern":"[url:value = 'http://triflackcom.com/main2.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39f40292-23b2-7aa5-8c57-000082077d8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.228.209.236:56903/i","pattern":"[url:value = 'http://113.228.209.236:56903/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--feeaf12d-5b90-5bee-bfbb-0000899b4b79","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.236.74.65:45120/i","pattern":"[url:value = 'http://77.236.74.65:45120/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d4e81b8-cebf-0fc8-187d-00008cc72f86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.235.243.150:48322/bin.sh","pattern":"[url:value = 'http://124.235.243.150:48322/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64ac025c-812d-d18c-4435-00007c861f5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://212.164.115.235:53219/bin.sh","pattern":"[url:value = 'http://212.164.115.235:53219/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0028fd38-0125-10ab-ecc4-00004aa9c68c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/sensi_hk","pattern":"[url:value = 'http://95.155.151.113/sensi_hk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14491048-3ad8-a302-fe4e-0000cf3d72a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/unifi.sh","pattern":"[url:value = 'http://95.155.151.113/unifi.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ce8cc01-ec1a-f638-bc95-00003c2add9d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/xd.aarch64","pattern":"[url:value = 'http://95.155.151.113/d/xd.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ce43bd3-6775-ae41-2444-0000e06c0702","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/xd.arm64","pattern":"[url:value = 'http://95.155.151.113/d/xd.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c3a6989-df83-5a93-7d19-000068a16c91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/sensi_tp","pattern":"[url:value = 'http://95.155.151.113/sensi_tp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60226aab-4c0b-886f-dc02-00006b293586","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/huawei.sh","pattern":"[url:value = 'http://95.155.151.113/huawei.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c08ceeaf-c1fe-6cb4-33a9-000002a14e5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/arm5","pattern":"[url:value = 'http://95.155.151.113/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2ec2aa8-a026-014c-7e51-0000e5ca2bbf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/sensi_av","pattern":"[url:value = 'http://95.155.151.113/sensi_av']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ead42f8-a6a0-8648-413f-00002589954a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/netgear.sh","pattern":"[url:value = 'http://95.155.151.113/netgear.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f488b86e-6534-1caf-c21d-000079408cd2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/hnap.sh","pattern":"[url:value = 'http://95.155.151.113/hnap.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d34ef9f8-485d-6988-3af6-00001bbb5176","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/sensi","pattern":"[url:value = 'http://95.155.151.113/sensi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e49e2663-d475-4b57-a97d-00006a8e0d54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/sensi_tbk","pattern":"[url:value = 'http://95.155.151.113/sensi_tbk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e327a6c-adc1-086b-c5b5-0000a8bcb788","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/arm64","pattern":"[url:value = 'http://95.155.151.113/arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf573955-75c3-160d-9129-0000658ae0a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.236.74.65:45120/bin.sh","pattern":"[url:value = 'http://77.236.74.65:45120/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a259dc68-5f97-964f-6846-00008d88bcd7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.225.133.213:37257/bin.sh","pattern":"[url:value = 'http://105.225.133.213:37257/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9088a77-5472-3587-0ba4-00006a7fc331","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.138.119.216:49346/i","pattern":"[url:value = 'http://222.138.119.216:49346/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--619a19a3-eb13-8998-37a2-0000a49275b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.139.212:38655/bin.sh","pattern":"[url:value = 'http://120.28.139.212:38655/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a53f4bab-0c66-af7e-ffca-000084b04c79","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.190.10.252:39675/i","pattern":"[url:value = 'http://196.190.10.252:39675/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a66bad-e58f-497b-7446-00009c6a3f2b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://39.80.60.21:60792/bin.sh","pattern":"[url:value = 'http://39.80.60.21:60792/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2609677-d910-b33b-26ac-0000cf61775d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.138.134.69:46780/bin.sh","pattern":"[url:value = 'http://110.138.134.69:46780/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a21ad689-9aab-5e23-58d4-00003092fee0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.127.104.208:40454/i","pattern":"[url:value = 'http://182.127.104.208:40454/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--072f3508-858d-4769-1198-0000f385ebfe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.107.229.126:33054/bin.sh","pattern":"[url:value = 'http://175.107.229.126:33054/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc882bc1-e8b9-11fc-27f8-0000f1084f1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.10.48.253:40771/bin.sh","pattern":"[url:value = 'http://175.10.48.253:40771/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8483f2c9-c42b-5822-c6e2-00003833b940","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.138.134.69:46780/i","pattern":"[url:value = 'http://110.138.134.69:46780/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc22e234-b26e-1ada-f8be-00006e3cd8b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.107.216:48024/bin.sh","pattern":"[url:value = 'http://42.233.107.216:48024/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1604ede-b831-5ec8-153e-000050295ef6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.217.34.254:59706/i","pattern":"[url:value = 'http://27.217.34.254:59706/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e12858d7-1cd3-a8b1-ccf6-00003b67195c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.147.92:47128/bin.sh","pattern":"[url:value = 'http://61.53.147.92:47128/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46ea6af6-1101-0b8a-cb05-00009af2c2c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.107.229.126:33054/i","pattern":"[url:value = 'http://175.107.229.126:33054/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81eb1ea8-4c0c-4468-17b9-0000c0844dd8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.147.92:47128/i","pattern":"[url:value = 'http://61.53.147.92:47128/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed9fac03-ef2c-1199-de22-00009432862a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_20993cb64056ec76.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_20993cb64056ec76.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75d85233-dc2a-57f4-02e9-0000d2de7b22","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.downloadpirate.com/moho-pro-14-win-x64-full-version-free-download/","pattern":"[url:value = 'https://www.downloadpirate.com/moho-pro-14-win-x64-full-version-free-download/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--691d398f-ec95-e86a-06d6-0000739df819","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.183.61:57147/Mozi.a","pattern":"[url:value = 'http://115.55.183.61:57147/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--664e8e6c-1373-152c-bcf5-000081dfaede","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.110:53335/bin.sh","pattern":"[url:value = 'http://196.189.98.110:53335/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21ceb504-22a3-5698-94aa-000016115819","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.33.248:48303/bin.sh","pattern":"[url:value = 'http://42.230.33.248:48303/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abdb35f7-f819-3176-36c5-0000f7cde9ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mediafire.com/file/pfxpcqrssrvi4h4/file","pattern":"[url:value = 'https://mediafire.com/file/pfxpcqrssrvi4h4/file']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--279be813-67ed-fc47-cab0-00001b6c6b88","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.mediafire.com/file/pfxpcqrssrvi4h4/file","pattern":"[url:value = 'https://www.mediafire.com/file/pfxpcqrssrvi4h4/file']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aff7d1fd-5519-3597-1bc3-0000f2903663","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.33.248:48303/i","pattern":"[url:value = 'http://42.230.33.248:48303/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad8ea3eb-f752-b4eb-052b-0000deeb3b4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.110:53335/i","pattern":"[url:value = 'http://196.189.98.110:53335/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83786f08-b8cb-a583-18a2-000046de9af3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://203.101.187.19:52053/bin.sh","pattern":"[url:value = 'http://203.101.187.19:52053/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6e9063f-6f88-da5e-7c5b-000054cd1a8f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.2:36838/bin.sh","pattern":"[url:value = 'http://210.208.111.2:36838/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e08419b-4746-56f8-9fa1-0000e289e4c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://203.101.187.19:52053/i","pattern":"[url:value = 'http://203.101.187.19:52053/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afa488ca-6c71-1d4d-9e25-00004aaf2325","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.231.229.97:60941/i","pattern":"[url:value = 'http://113.231.229.97:60941/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c77d492e-6194-205e-6bd6-0000c9aad74e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.2:36838/i","pattern":"[url:value = 'http://210.208.111.2:36838/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73fcb9ff-6c5c-befa-af85-0000cbe2daf6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.226.18:57698/i","pattern":"[url:value = 'http://221.15.226.18:57698/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84445c7a-ccc6-1c6c-dd61-0000caaf3f7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.226.18:57698/bin.sh","pattern":"[url:value = 'http://221.15.226.18:57698/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3e5a871-3545-3652-7750-000017fb670c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.21.60:54714/i","pattern":"[url:value = 'http://110.37.21.60:54714/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0986c5e3-3e87-6653-be0b-0000ed842e40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.252.205:60751/i","pattern":"[url:value = 'http://182.114.252.205:60751/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3472f654-f83c-9819-d31c-0000632e95dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.55.88:55713/bin.sh","pattern":"[url:value = 'http://42.235.55.88:55713/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a3320e9-ff7c-5267-5286-00007811eb0f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.138.43:33994/bin.sh","pattern":"[url:value = 'http://61.52.138.43:33994/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1b63806-865e-ee9b-99c9-0000c566938f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.113.143:47041/bin.sh","pattern":"[url:value = 'http://115.55.113.143:47041/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cadd4e8-e0a5-4a9c-514e-00001eb41ba4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.54.194.76:45113/i","pattern":"[url:value = 'http://61.54.194.76:45113/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48e4d60f-7aa6-fa45-49f9-00008f2f4623","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.116.242:47371/bin.sh","pattern":"[url:value = 'http://125.43.116.242:47371/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0230e65-f12c-e375-401c-0000868e1029","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.236.232:44430/i","pattern":"[url:value = 'http://115.55.236.232:44430/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ab4dfc7-17ac-5be4-f768-0000aa3a6b54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.136.13.79:50906/bin.sh","pattern":"[url:value = 'http://110.136.13.79:50906/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06ec8634-bffa-d037-c951-00001371997a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.11.225:51361/bin.sh","pattern":"[url:value = 'http://110.36.11.225:51361/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--126f47e8-4b8d-4f0a-7cdd-000031b261af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.119.220:37643/bin.sh","pattern":"[url:value = 'http://110.37.119.220:37643/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b806b1c-af97-94d5-b16c-00008afb2edd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.116.242:47371/i","pattern":"[url:value = 'http://125.43.116.242:47371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--530f9a47-f0ec-7005-bbb0-00009ab2a1b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.55.88:55713/i","pattern":"[url:value = 'http://42.235.55.88:55713/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--335bdbd0-ffac-1c3e-e1b3-0000e78ae405","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.136.13.79:50906/i","pattern":"[url:value = 'http://110.136.13.79:50906/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0d4bf25-50a9-19b7-2f61-0000281365cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.144.52:40794/bin.sh","pattern":"[url:value = 'http://115.50.144.52:40794/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6831bfed-527f-4b9c-bec4-000067cfb478","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.119.89:36540/i","pattern":"[url:value = 'http://110.37.119.89:36540/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b82a25a9-fa35-9dbe-fab3-000011973ac8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.229.247.64:58197/bin.sh","pattern":"[url:value = 'http://42.229.247.64:58197/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64002448-79d1-9635-0d52-00007b177814","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.144.52:40794/i","pattern":"[url:value = 'http://115.50.144.52:40794/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9152f7f4-071e-c1f9-9635-00009823d991","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.18.143:41104/i","pattern":"[url:value = 'http://219.157.18.143:41104/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0825a89-40a0-2bcd-6a8b-0000597032a3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.58.252:48725/bin.sh","pattern":"[url:value = 'http://182.119.58.252:48725/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74b07602-bc1c-e392-5c61-000045f6fc48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.241.164:43002/bin.sh","pattern":"[url:value = 'http://123.9.241.164:43002/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c26a8879-79b6-f3d0-2a39-0000f16b8cb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.179.220:43157/bin.sh","pattern":"[url:value = 'http://115.52.179.220:43157/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cde4e69-27b0-bfff-8d9c-0000bce128d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.17.147:53523/i","pattern":"[url:value = 'http://123.8.17.147:53523/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8c117f0-1569-458a-1023-0000a8524006","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.212.190:43969/i","pattern":"[url:value = 'http://120.84.212.190:43969/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec14fdc7-d038-6919-be4f-0000db5e8e0a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.25.110:38551/bin.sh","pattern":"[url:value = 'http://123.9.25.110:38551/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95eb0f19-dcd0-5455-d982-000057c1fafb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.156.115.64:41484/i","pattern":"[url:value = 'http://219.156.115.64:41484/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--019b08ff-4473-fd6b-5bc8-0000e5eab186","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.236.157.223:50944/i","pattern":"[url:value = 'http://113.236.157.223:50944/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd77960e-ee47-6a43-eb79-00001792a11a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.24.112:44963/i","pattern":"[url:value = 'http://42.230.24.112:44963/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62e4ce58-3e90-1be5-cdae-000064c7e665","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.156.140:46601/i","pattern":"[url:value = 'http://61.52.156.140:46601/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cb57108-fa0f-b9d3-93b7-0000774a1bfe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.183.1:55955/bin.sh","pattern":"[url:value = 'http://182.119.183.1:55955/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--471c0e38-0aaa-61e0-db6b-0000548c8000","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.212.157:59656/bin.sh","pattern":"[url:value = 'http://219.157.212.157:59656/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19525b0a-6c51-2fe0-bcdd-000025cb7426","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.149.69:54758/i","pattern":"[url:value = 'http://115.48.149.69:54758/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2bd83f3-20be-c1de-6d22-0000e68a8c2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.178.164.205:52529/bin.sh","pattern":"[url:value = 'http://42.178.164.205:52529/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa1c5c57-cca4-0cd7-1ece-00009f8a3326","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.74.52.248:35057/bin.sh","pattern":"[url:value = 'http://39.74.52.248:35057/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4545a2b8-70a1-6b37-e3c1-0000a5bc8137","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.74.52.248:35057/i","pattern":"[url:value = 'http://39.74.52.248:35057/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--856f8e47-112b-ebbb-8ca1-0000f9ae1762","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.48.123.149:50607/bin.sh","pattern":"[url:value = 'http://144.48.123.149:50607/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8941921b-3c77-c6b9-c16f-0000a6a99028","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.239.96.147:46916/bin.sh","pattern":"[url:value = 'http://113.239.96.147:46916/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e82399e-85a6-4329-d4b3-00000ec9bfdc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.227.204.129:58208/i","pattern":"[url:value = 'http://42.227.204.129:58208/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bd3af35-b015-bf44-d637-0000e0934116","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.140.183.107:44703/i","pattern":"[url:value = 'http://222.140.183.107:44703/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78cb039f-d572-2706-c661-000025a2f2e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.54.13:58614/i","pattern":"[url:value = 'http://123.14.54.13:58614/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eef9c33-e0ca-b004-07c9-00003f1a2416","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.177.186.117:53442/bin.sh","pattern":"[url:value = 'http://42.177.186.117:53442/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddf81cb3-bb8c-5007-dee3-0000667f2249","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.62.149.49:57320/i","pattern":"[url:value = 'http://115.62.149.49:57320/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6dda6fd-c0d2-e7c7-9d5a-0000495510cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.12.8:38162/i","pattern":"[url:value = 'http://110.37.12.8:38162/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f39dd229-d784-179b-e837-0000fe5a7056","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.192.237:48636/bin.sh","pattern":"[url:value = 'http://182.114.192.237:48636/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b527979b-aa88-68f1-3133-00009e3abbbc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.184.29.187:45741/bin.sh","pattern":"[url:value = 'http://119.184.29.187:45741/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ea9e913-27f3-e351-715b-0000caa00b00","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.58.92:41202/i","pattern":"[url:value = 'http://110.37.58.92:41202/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--897c8ef4-f693-a70e-ab36-0000ba0816f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.184.7.234:46382/i","pattern":"[url:value = 'http://119.184.7.234:46382/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b6a17ae-b175-5e5a-60b2-00008f74393f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.99.250.225:49416/i","pattern":"[url:value = 'http://119.99.250.225:49416/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cb8d6f1-2c59-385e-0557-000052a80512","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.0.79:34827/bin.sh","pattern":"[url:value = 'http://125.43.0.79:34827/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f395de7-2d37-68a2-cdb4-000008cb28b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.249.68.67:57560/bin.sh","pattern":"[url:value = 'http://112.249.68.67:57560/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00cbcc74-5e4d-55ba-51d7-0000cc770658","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.9.151:44103/i","pattern":"[url:value = 'http://115.55.9.151:44103/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2d377d0-0c2d-63a0-44fc-0000065b1c03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.213.31:48901/bin.sh","pattern":"[url:value = 'http://222.137.213.31:48901/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dcf7185-f62c-4841-546c-00002e770b5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.214.242:35671/i","pattern":"[url:value = 'http://120.84.214.242:35671/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--646fdca9-b09c-e49a-f7d3-0000d25fd5ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.214.125:40164/i","pattern":"[url:value = 'http://120.84.214.125:40164/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e40f14f-0deb-1820-94bf-0000f4cb1e41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.53.72.145:33612/i","pattern":"[url:value = 'http://42.53.72.145:33612/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf17a54e-6412-dcae-6f21-0000ded128b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.24.218.134:45145/bin.sh","pattern":"[url:value = 'http://117.24.218.134:45145/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--258652c1-76e9-ee34-65bd-0000e84da03f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.29.170:41884/i","pattern":"[url:value = 'http://115.55.29.170:41884/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9ab8c0e-7d21-66bb-e8bc-000028dac55a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.54.124.37:33179/bin.sh","pattern":"[url:value = 'http://115.54.124.37:33179/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b523854e-f06f-0fa9-c9b2-00006ae1f8ad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.113.119:44177/i","pattern":"[url:value = 'http://182.116.113.119:44177/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ce14d5e-9960-bed0-4427-0000008ea58e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.228.235:44677/i","pattern":"[url:value = 'http://182.121.228.235:44677/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--695ecf28-56f5-5420-cad8-00000299e5ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.17.147:53523/bin.sh","pattern":"[url:value = 'http://123.8.17.147:53523/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eac8bf0-46c9-54dc-c725-000046a59813","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.29.170:41884/bin.sh","pattern":"[url:value = 'http://115.55.29.170:41884/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7329dffa-2698-57bd-8f01-00000837f267","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.54.124.37:33179/i","pattern":"[url:value = 'http://115.54.124.37:33179/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75b5c8df-3680-ee33-13b6-0000ca8b2d93","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.24.218.134:45145/i","pattern":"[url:value = 'http://117.24.218.134:45145/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9d6a9ac-3eb7-b5a8-3511-000034619112","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://179.108.89.220:43996/i","pattern":"[url:value = 'http://179.108.89.220:43996/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c399cb0b-4afc-4e95-861e-000059fe8fe9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.53.51.109:44329/i","pattern":"[url:value = 'http://42.53.51.109:44329/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2505f3bc-8ff7-84ab-2943-000077c9040e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.160.130.178:50403/bin.sh","pattern":"[url:value = 'http://103.160.130.178:50403/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--910ebfc4-f5d8-026f-45f5-0000e635e4d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.184.7.234:46382/bin.sh","pattern":"[url:value = 'http://119.184.7.234:46382/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9540d428-b5be-4c86-022a-000051a013e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.178.164.205:52529/i","pattern":"[url:value = 'http://42.178.164.205:52529/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--395825aa-82eb-27ce-b8d3-0000adda9400","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.134.172.2:44618/bin.sh","pattern":"[url:value = 'http://222.134.172.2:44618/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2e01474-8987-23b9-2d2e-0000292ab0cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.47.244.3:55442/bin.sh","pattern":"[url:value = 'http://125.47.244.3:55442/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aaa44a6-90ca-f4dd-f7a9-00008b95a4f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.0.79:34827/i","pattern":"[url:value = 'http://125.43.0.79:34827/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0463d5b8-6a7e-932e-bc03-000017cfebba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.225.206.253:49336/bin.sh","pattern":"[url:value = 'http://42.225.206.253:49336/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ba55477-a6fe-cc38-f07a-0000dda3f477","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.9.151:44103/bin.sh","pattern":"[url:value = 'http://115.55.9.151:44103/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06f737d6-7c28-cc1b-4934-0000ceaccba1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.85.6.186:59524/i","pattern":"[url:value = 'http://42.85.6.186:59524/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93ee43bf-717c-3ca0-d9fb-0000a6922fa9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.241.164:43002/i","pattern":"[url:value = 'http://123.9.241.164:43002/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4e202ba-8c69-9e4a-f0a9-0000408ddf7a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.112.39.204:49245/i","pattern":"[url:value = 'http://182.112.39.204:49245/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c505ec1-bfdf-7b32-7b8a-00002b48988b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.171.191:59435/i","pattern":"[url:value = 'http://115.58.171.191:59435/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10573983-8584-3a89-d9fe-0000ec8ea98a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.214.126:36545/i","pattern":"[url:value = 'http://120.84.214.126:36545/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c07905c-bf62-6f5a-3ee8-00007ef58def","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.103.116.68:54641/i","pattern":"[url:value = 'http://59.103.116.68:54641/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86fbdeee-0666-bb44-1cba-000062de7b87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.35.149:47141/i","pattern":"[url:value = 'http://42.230.35.149:47141/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66582c2f-1f45-9ecd-d679-00009be6f67d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.181.239:50468/i","pattern":"[url:value = 'http://123.14.181.239:50468/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95ee9e09-2701-2f3d-a885-000053d7165f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.28.62.99:10819/bin.sh","pattern":"[url:value = 'http://194.28.62.99:10819/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e297851-11fd-4bb1-cde0-00003c5c6ac5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.197.152:60373/i","pattern":"[url:value = 'http://42.224.197.152:60373/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--573a92ec-037b-baa9-b30f-0000d1f55d17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://163.142.95.27:59432/i","pattern":"[url:value = 'http://163.142.95.27:59432/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c878c17e-f46e-80f4-c1b0-000026261f3d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://180.252.209.203:43259/bin.sh","pattern":"[url:value = 'http://180.252.209.203:43259/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb4e7d78-e321-09e6-9400-0000a56117d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.197.152:60373/bin.sh","pattern":"[url:value = 'http://42.224.197.152:60373/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab0d9152-edf9-c178-00a2-00008da5783d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.172.13.19:60669/bin.sh","pattern":"[url:value = 'http://175.172.13.19:60669/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4824162b-7356-0658-7d35-0000e0f5bde1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.227.134.211:38080/i","pattern":"[url:value = 'http://42.227.134.211:38080/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b87c0cb-674c-4e69-165f-0000d1aafde9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.25.110:38551/i","pattern":"[url:value = 'http://123.9.25.110:38551/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8be5f750-dfbb-54e0-2c88-000013570a18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.179.220:43157/i","pattern":"[url:value = 'http://115.52.179.220:43157/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0220546b-e02c-e4da-7aea-0000554dd9f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://82.48.207.52:56706/i","pattern":"[url:value = 'http://82.48.207.52:56706/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3471a5b-7717-c397-578d-0000cc0aaad4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.12.8:38162/bin.sh","pattern":"[url:value = 'http://110.37.12.8:38162/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d53d7ff-3827-9bc1-fd49-000076f522f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.86.172.171:41089/i","pattern":"[url:value = 'http://42.86.172.171:41089/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eac30105-ab08-006d-2896-0000e9cb25e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.48.41.248:36948/i","pattern":"[url:value = 'http://36.48.41.248:36948/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6d94156-dc99-3d29-5c7d-00008a2a036e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.213.31:48901/i","pattern":"[url:value = 'http://222.137.213.31:48901/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cadaaa3c-8152-33e4-7e55-0000ebe93639","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.139.212:38655/i","pattern":"[url:value = 'http://120.28.139.212:38655/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae704fc3-83f9-5c27-bff9-0000407b4fef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.217.3.109:54209/bin.sh","pattern":"[url:value = 'http://27.217.3.109:54209/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3c95d85-8398-a339-385d-0000fe25c57b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.53.72.145:33612/bin.sh","pattern":"[url:value = 'http://42.53.72.145:33612/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11c952a5-3c4d-5522-323f-000041f09ff6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.7.68:35582/bin.sh","pattern":"[url:value = 'http://61.52.7.68:35582/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e803e282-0dd4-2042-fcfe-0000e3864a7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.184.29.187:45741/i","pattern":"[url:value = 'http://119.184.29.187:45741/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cebd55f-da97-5898-e49d-0000580126d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.219.81:55457/bin.sh","pattern":"[url:value = 'http://125.44.219.81:55457/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25003732-d338-16e2-4459-0000439ed441","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://180.252.209.203:43259/i","pattern":"[url:value = 'http://180.252.209.203:43259/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24d507c9-a593-f574-47a7-0000d3f058d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.28.62.99:10819/i","pattern":"[url:value = 'http://194.28.62.99:10819/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7027cb1d-63d2-df9e-0010-00006d8cce13","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.80.149:33303/i","pattern":"[url:value = 'http://36.69.80.149:33303/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e77f790-8169-c6db-e982-00009cf96eb5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.127.26.190:34325/i","pattern":"[url:value = 'http://182.127.26.190:34325/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67108d42-ce92-a4f7-5454-000014f2ea05","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.124.41.91:59176/i","pattern":"[url:value = 'http://182.124.41.91:59176/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d0c01b8-9d17-6725-50ff-00002f9697f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.124.41.91:59176/bin.sh","pattern":"[url:value = 'http://182.124.41.91:59176/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd9729c0-a3a9-2f38-4bf3-00004ff44a5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.80.149:33303/bin.sh","pattern":"[url:value = 'http://36.69.80.149:33303/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4843cea-0c56-83d2-d2ae-0000c9252eca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.178.26.93:60244/i","pattern":"[url:value = 'http://42.178.26.93:60244/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--086b3802-86b2-ed7a-e8da-00003a0d95e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.113.119:44177/bin.sh","pattern":"[url:value = 'http://182.116.113.119:44177/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff044469-cad1-8599-66ee-00002008fbe6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.148.29.181:47643/i","pattern":"[url:value = 'http://175.148.29.181:47643/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e99766cf-dde1-ba0b-f36c-000033495efc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.255.6.104:51842/i","pattern":"[url:value = 'http://112.255.6.104:51842/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3208225a-0718-8007-34f2-00003c3420e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.121.138.211:6609/linux","pattern":"[url:value = 'http://47.121.138.211:6609/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c868df9-94e5-e5a4-0f36-0000c495cdee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.178.215:39984/i","pattern":"[url:value = 'http://182.121.178.215:39984/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d671147-2015-6090-5d0f-000001ac094d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.178.26.93:60244/bin.sh","pattern":"[url:value = 'http://42.178.26.93:60244/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0aa44dc-a59f-7d26-52d2-0000d2f349ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.54.194.76:45113/bin.sh","pattern":"[url:value = 'http://61.54.194.76:45113/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1db8c08f-ac5f-26c0-65f7-0000105ff5fe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.95.255.56:6610/linux","pattern":"[url:value = 'http://47.95.255.56:6610/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea4b8422-468b-1335-c949-0000715e129d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.103.116.68:54641/bin.sh","pattern":"[url:value = 'http://59.103.116.68:54641/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e15fa3dd-ca51-91e2-7912-00000fd94063","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.178.118.193:47288/bin.sh","pattern":"[url:value = 'http://78.178.118.193:47288/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1dc53c1-023c-a0b8-6961-00007ae82940","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.119.220:37643/i","pattern":"[url:value = 'http://110.37.119.220:37643/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae719a5d-dd26-ef33-fd4b-00003cbedbd9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.178.118.193:47288/i","pattern":"[url:value = 'http://78.178.118.193:47288/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6956bf25-bbfd-594a-a585-00002ba5877a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dfb9efa-caf2-1362-c204-000089883f95","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/lkxstress.sh","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/lkxstress.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfdca956-533b-f14f-3f3f-00006ce78e3c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm5","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c8e0829-577b-22b1-65d0-000001331c62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.x86","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56d5f8ec-f103-ba00-d935-00007e5221d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm6","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21d2c87a-b67f-f89b-367d-0000c6ee46b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm7","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c54c8c93-4620-b659-d38a-0000e37f993e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.x86_64","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--233e5c0e-1e3d-c0e2-addb-000029876774","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.i686","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b986e610-dda4-3d92-0b9c-0000e4af9418","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.m68k","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eee9222-8710-4d04-3037-0000cb7af049","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arc","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d46edbb0-e996-bb30-6007-0000f9eeebe1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.sh4","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5aad2c6-6898-f31d-5787-0000e45942c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.mips","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a5c6093-d4a6-d0c3-1600-00000c033525","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm64","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4078140f-f068-ac44-3b8c-00008f5a2c88","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.mpsl","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a13c39e7-e187-bbe1-5c29-000079307217","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.ppc","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edf0d0ba-2d79-ef1e-b364-0000003a0986","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.149.65.165:37215/bin.sh","pattern":"[url:value = 'http://175.149.65.165:37215/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4da404bc-c7ac-b6d3-ef6f-00008de5e062","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/lkxstress.sh","pattern":"[url:value = 'http://170.205.31.25/lkxstress.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee491a25-2ce4-a4ba-10e1-000075ddc2a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.i686","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38dd94ed-1f6b-23ee-522d-0000b803e712","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.mips","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--742e6345-37db-7522-0f34-000010213f5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.sh4","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ba2bec7-d1a6-7a94-2c64-000022088402","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.arm6","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eae2ad7-ad66-d6d9-c993-000022b524f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.arc","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c835828-6b9e-b5ba-94c2-0000c4fb571c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.x86_64","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eca58e51-7a1c-007b-ae2c-00009ab4e367","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.arm7","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02abef7d-9e08-a963-904f-000030bd2bec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.arm5","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--017c8112-a568-72df-6082-000090ffa6ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.ppc","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d0f5224-e0e9-48dd-9c7e-0000d3008958","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.mpsl","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cceb0dc-40ed-7d65-5fd8-0000e8fcc8d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.x86","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c91607d0-2f12-2610-41b3-0000c26a53c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.arm","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74f1a03b-7d6d-c976-cb9a-0000b8f531c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.m68k","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f62dee95-f875-fda7-76c0-00008a8cbd54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.arm64","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ccb890c-1b86-692f-7f90-00001b9b84ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.221:38824/bin.sh","pattern":"[url:value = 'http://210.208.110.221:38824/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90a22e36-db8f-2e97-73ba-0000e74f17f4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.212.61:48371/i","pattern":"[url:value = 'http://120.84.212.61:48371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--922b9669-66ca-c47e-9f74-000038d7614f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.149.65.165:37215/i","pattern":"[url:value = 'http://175.149.65.165:37215/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cf93491-d136-f40a-b14e-000077ec2eaa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.42.30.11:33676/i","pattern":"[url:value = 'http://125.42.30.11:33676/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a63f62b-28a2-e00d-0c0a-000056339a0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.221:38824/i","pattern":"[url:value = 'http://210.208.110.221:38824/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05f3076e-1236-d776-c39c-0000ddca96e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.54.205.42:41895/bin.sh","pattern":"[url:value = 'http://61.54.205.42:41895/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9e5cca2-bbf8-4468-58a5-000099a542ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.48.165:35638/i","pattern":"[url:value = 'http://182.116.48.165:35638/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd9f2981-83bb-91ca-af9b-0000307725fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.54.205.42:41895/i","pattern":"[url:value = 'http://61.54.205.42:41895/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebd6a855-8f29-861c-8bbd-0000976fe81e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.226.237.118:47311/bin.sh","pattern":"[url:value = 'http://42.226.237.118:47311/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59efd8b3-161b-425a-5943-00004a3ab540","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.226.237.118:47311/i","pattern":"[url:value = 'http://42.226.237.118:47311/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--306715a3-ebad-3b1a-7433-0000cb2bb448","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.106.46:52448/i","pattern":"[url:value = 'http://112.248.106.46:52448/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a70bd27-c6c1-3bc2-f5ed-0000c81ab438","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_8d4eff19b5763782.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_8d4eff19b5763782.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c9fe27c-3209-142e-e09f-0000a565cbbd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-00d54ae289e84e93a3c8640fb2301c5f.r2.dev/Package.zip","pattern":"[url:value = 'https://pub-00d54ae289e84e93a3c8640fb2301c5f.r2.dev/Package.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e7c42d6-025b-2a9d-f0b4-0000e68e1cc2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://cheatclients.com/downloads/4E_Client.jar","pattern":"[url:value = 'https://cheatclients.com/downloads/4E_Client.jar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fd3eae0-dc8a-c6cb-bfe5-0000e6df0d19","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://meteorclient.shop/meteorclientjar/meteorclient-1.21.11-84.jar","pattern":"[url:value = 'https://meteorclient.shop/meteorclientjar/meteorclient-1.21.11-84.jar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4421b41f-6278-bbfa-4ef7-00002fccda45","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://cheatclients.com/downloads/Radium_Client.jar","pattern":"[url:value = 'https://cheatclients.com/downloads/Radium_Client.jar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a692c6c2-38c3-1f15-d11a-0000e5fc8586","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://cheatclients.com/downloads/Zyphers_Rig_Mod.jar","pattern":"[url:value = 'https://cheatclients.com/downloads/Zyphers_Rig_Mod.jar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bd78c91-5b2c-4bcc-93bf-000087260752","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://cheatclients.com/downloads/krypton.jar","pattern":"[url:value = 'https://cheatclients.com/downloads/krypton.jar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7ec4ed0-1a80-6ad2-a70c-0000beb9bc81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://fkoqonr2vgbsw7qu.public.blob.vercel-storage.com/data.msi","pattern":"[url:value = 'https://fkoqonr2vgbsw7qu.public.blob.vercel-storage.com/data.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2251067f-3307-6554-f002-0000e1edac05","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.148.24:8081/lol","pattern":"[url:value = 'http://176.65.148.24:8081/lol']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b49820e7-740d-0941-46f9-0000338bbceb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.167.254.183:35093/bin.sh","pattern":"[url:value = 'http://175.167.254.183:35093/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fda7aa20-a0df-9888-0838-0000d061619b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://118.232.137.101:55129/bin.sh","pattern":"[url:value = 'http://118.232.137.101:55129/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1b2e10d-3cff-38b1-2fc7-00009ea4c621","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.48.41.248:36948/bin.sh","pattern":"[url:value = 'http://36.48.41.248:36948/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae02836b-2f3b-a339-782a-00004e54cb65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.167.254.183:35093/i","pattern":"[url:value = 'http://175.167.254.183:35093/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f0a7018-b74a-3554-c3ac-000029a92711","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://121.231.139.26:36392/bin.sh","pattern":"[url:value = 'http://121.231.139.26:36392/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--947e0b62-f54c-5a70-0890-0000eb6cdf84","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.255.6.104:51842/bin.sh","pattern":"[url:value = 'http://112.255.6.104:51842/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb034404-d744-c339-8d70-0000fe633622","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.118.142:40829/bin.sh","pattern":"[url:value = 'http://61.52.118.142:40829/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--622ba13a-a4c3-b252-7063-0000c62a5162","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.118.142:40829/i","pattern":"[url:value = 'http://61.52.118.142:40829/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b158945e-d07d-351c-8456-0000e2c9d07d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.24.112:44963/bin.sh","pattern":"[url:value = 'http://42.230.24.112:44963/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2169560e-7c0a-9eb6-681b-000026674bab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.150.155:57147/bin.sh","pattern":"[url:value = 'http://115.55.150.155:57147/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--797f53ae-ee5c-4205-eb40-000076bc5787","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.150.155:57147/i","pattern":"[url:value = 'http://115.55.150.155:57147/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c9a690a-116f-ed72-3315-00005d046a80","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://111.127.232.172:44915/bin.sh","pattern":"[url:value = 'http://111.127.232.172:44915/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd84a120-8add-dfe3-2792-000091f2c902","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.36:51347/bin.sh","pattern":"[url:value = 'http://210.208.111.36:51347/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1949b58-914c-020a-0729-0000f30e3eeb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.106.196:55036/i","pattern":"[url:value = 'http://123.13.106.196:55036/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95cbe069-19f9-5dad-5a12-0000e1b85d40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.197.132.72:52016/bin.sh","pattern":"[url:value = 'http://115.197.132.72:52016/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4e32b50-7487-6493-3d98-0000d7b92571","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.36:51347/i","pattern":"[url:value = 'http://210.208.111.36:51347/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b4349cd-e99d-2411-3bad-0000a36fa4b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.230.16:46574/bin.sh","pattern":"[url:value = 'http://123.12.230.16:46574/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8884ef9-ea71-f0c5-1a46-0000c3fa64d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.230.16:46574/i","pattern":"[url:value = 'http://123.12.230.16:46574/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ca07ec6-f32e-d3ad-3a72-0000063e58a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.10.145.33:33546/i","pattern":"[url:value = 'http://123.10.145.33:33546/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b17d4d40-8d23-8a82-9278-0000ef8ff416","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.11.225:51361/i","pattern":"[url:value = 'http://110.36.11.225:51361/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3ff112f-5f87-1729-1687-0000b9bc884d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_mipsel","pattern":"[url:value = 'http://109.248.160.75/data_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20a25a51-cb97-f197-4b28-0000e1847613","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.x86","pattern":"[url:value = 'http://46.151.182.200/bins/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d510662-6d94-96b5-062a-0000f5139c19","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_mips","pattern":"[url:value = 'http://109.248.160.75/data_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d45b34be-47eb-f423-336d-00007c25edeb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/bbc","pattern":"[url:value = 'http://109.248.160.75/bbc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27277df2-70d0-0435-7a27-00007dad50e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_arm5","pattern":"[url:value = 'http://109.248.160.75/data_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e990b48-828b-4c13-0354-0000e0d86b73","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_x86_64","pattern":"[url:value = 'http://109.248.160.75/data_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be2e2c48-2338-d6de-cdae-00006f18ff09","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_arm6","pattern":"[url:value = 'http://109.248.160.75/data_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9291cde-6939-e413-f7da-0000d7a4986c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_arm7","pattern":"[url:value = 'http://109.248.160.75/data_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf8e9f6e-3c37-69c4-d728-00004ae69bb9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_x86","pattern":"[url:value = 'http://109.248.160.75/data_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1162131b-aa7f-9ee3-18d7-0000265648c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_aarch64","pattern":"[url:value = 'http://109.248.160.75/data_aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45d73fcf-0a64-60d8-57e7-00002eecf9dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_powerpc","pattern":"[url:value = 'http://109.248.160.75/data_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50204d64-d65c-c1bd-9076-0000c5113782","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_arm4","pattern":"[url:value = 'http://109.248.160.75/data_arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9270af4-a84e-9db7-273f-0000195ec3fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://111.127.232.172:44915/i","pattern":"[url:value = 'http://111.127.232.172:44915/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3460a383-f95b-4a5c-12f0-0000df9d6e31","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.209.147:55609/i","pattern":"[url:value = 'http://130.12.209.147:55609/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71aad826-a2d0-38fc-bf99-0000b7547a6c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.244.28:44252/bin.sh","pattern":"[url:value = 'http://123.12.244.28:44252/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--052d0565-d75e-f1fa-9c8a-000082c2e450","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.140.176.80:57695/bin.sh","pattern":"[url:value = 'http://222.140.176.80:57695/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4203f1a-cdb8-97b9-ce6d-000086776938","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.79.41:41991/i","pattern":"[url:value = 'http://42.235.79.41:41991/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c90c2296-6793-5b46-6f8c-0000a3ec8b2e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://143.246.195.33:48973/systemdd","pattern":"[url:value = 'https://143.246.195.33:48973/systemdd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f7e6e2c-6035-d314-2266-000089e2e017","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.140.176.80:57695/i","pattern":"[url:value = 'http://222.140.176.80:57695/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b464da6d-f1c1-d8fd-8936-0000857195bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.244.28:44252/i","pattern":"[url:value = 'http://123.12.244.28:44252/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cd50d46-c405-ffa2-b21e-0000c376ece6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.186.19:46271/bin.sh","pattern":"[url:value = 'http://221.15.186.19:46271/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--551cdc2c-9c0a-e516-de71-0000fcad2c23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.186.19:46271/i","pattern":"[url:value = 'http://221.15.186.19:46271/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d6d4d8c-77e2-7823-c386-00006a8d8b6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.151.82.88:52513/i","pattern":"[url:value = 'http://175.151.82.88:52513/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f86e0cf2-452e-94a9-ea99-00004489e1bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.152.237:50318/i","pattern":"[url:value = 'http://115.55.152.237:50318/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4293f644-d41c-e82e-eee6-0000a805e435","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.150.18:40732/bin.sh","pattern":"[url:value = 'http://123.5.150.18:40732/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89a29db3-75e0-1546-79a9-0000cf5933fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.31.103.204:36161/bin.sh","pattern":"[url:value = 'http://103.31.103.204:36161/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f13b653-9687-2627-fcdc-0000acad9db8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.90.145.46:39695/bin.sh","pattern":"[url:value = 'http://39.90.145.46:39695/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10452def-6c79-0304-294b-000070543dd3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.91.33:34772/i","pattern":"[url:value = 'http://110.36.91.33:34772/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cf5f310-3a6b-ffd9-8f90-00001a16520f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.225.133.213:37257/i","pattern":"[url:value = 'http://105.225.133.213:37257/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b728e10-664b-d22f-d753-0000f35b4310","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.217.11:59440/i","pattern":"[url:value = 'http://61.52.217.11:59440/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f86e8db8-6d6b-99b4-fb7e-00001b1c40a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://37.77.150.120/bin/support.client.exe","pattern":"[url:value = 'https://37.77.150.120/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64a1aa40-0982-8f6e-a7c8-000071d50f17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://45.141.119.82/update.ps1","pattern":"[url:value = 'http://45.141.119.82/update.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84e74e0c-542a-8245-c4a6-0000adf8a91e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://45.141.119.82/setup.exe","pattern":"[url:value = 'http://45.141.119.82/setup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43b2f821-bdbe-a933-6321-000034f3d02f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://37.77.150.120/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://37.77.150.120/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--069f13f2-1759-d6ee-165b-000043692d51","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.221.9.116:54492/bin.sh","pattern":"[url:value = 'http://113.221.9.116:54492/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8e34963-dad9-b9aa-2efd-0000a65f7791","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.221.9.116:54492/i","pattern":"[url:value = 'http://113.221.9.116:54492/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc62826e-849a-6e13-45ed-00001c365985","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.66.139:39448/bin.sh","pattern":"[url:value = 'http://36.69.66.139:39448/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9537c747-66c8-9645-d922-0000bda53af8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.220.232:55420/i","pattern":"[url:value = 'http://61.53.220.232:55420/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccc43fc3-1ea5-0aaf-76dd-0000a34841ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.62.148.107:57509/i","pattern":"[url:value = 'http://115.62.148.107:57509/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55dca9cb-2951-e5f0-12c1-0000992ca505","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.239.150.240:43603/bin.sh","pattern":"[url:value = 'http://42.239.150.240:43603/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9393a05-ba4e-e23b-4766-00008811d18d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.249.199.3:49338/bin.sh","pattern":"[url:value = 'http://103.249.199.3:49338/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff0ddfff-748f-6218-b1d4-000032ffd4d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.249.199.3:49338/i","pattern":"[url:value = 'http://103.249.199.3:49338/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6909ddf9-1128-0b76-e2fb-000003290e6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.66.139:39448/i","pattern":"[url:value = 'http://36.69.66.139:39448/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9efd1d8-26f1-8c9c-f393-0000df7a2a68","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.188.44.167:51273/bin.sh","pattern":"[url:value = 'http://123.188.44.167:51273/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--263ab5be-07ae-8577-5b36-0000640815dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.188.44.167:51273/i","pattern":"[url:value = 'http://123.188.44.167:51273/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--740f7a7b-aef9-4d45-ae47-0000e9bd4e86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.230.1:53552/bin.sh","pattern":"[url:value = 'http://110.39.230.1:53552/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1059c34-aba6-69d2-b3e7-00007a8a399a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.230.1:53552/i","pattern":"[url:value = 'http://110.39.230.1:53552/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42173fdd-4ab3-050b-a1dd-0000aa2a4c74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.43.119:55539/i","pattern":"[url:value = 'http://110.37.43.119:55539/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8a90b20-8b4e-3b50-54c5-000080c5c101","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.239.150.240:43603/i","pattern":"[url:value = 'http://42.239.150.240:43603/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59723473-6724-ed70-9793-0000a7e07019","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.23.192.190:48972/i","pattern":"[url:value = 'http://60.23.192.190:48972/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f2335cd-dbff-9c6a-d243-00006d57f3e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.218.67:53176/bin.sh","pattern":"[url:value = 'http://115.55.218.67:53176/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e093e97f-9493-f8ec-f53e-00004d61e078","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.202.187.105:58599/bin.sh","pattern":"[url:value = 'http://115.202.187.105:58599/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1f10dbf-334f-a10b-52d8-0000456040e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_5939fd79fb073513.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_5939fd79fb073513.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87bb5810-9c4f-cde7-03e6-0000c6815b01","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.9.194:56154/bin.sh","pattern":"[url:value = 'http://182.121.9.194:56154/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8abfa63f-4480-9a1e-b4f6-000078c252fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.61.166:59222/bin.sh","pattern":"[url:value = 'http://110.37.61.166:59222/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f4b0e7c-fcb4-391c-32c7-0000d6106183","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.61.166:59222/i","pattern":"[url:value = 'http://110.37.61.166:59222/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4275fa48-5095-fd0a-b4a6-000044c31510","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.9.194:56154/i","pattern":"[url:value = 'http://182.121.9.194:56154/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47493451-1b08-ba7e-2f4a-00002d220bad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://203.101.187.5:58359/bin.sh","pattern":"[url:value = 'http://203.101.187.5:58359/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f7a7581-daaf-25c6-9f62-0000f61921b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://203.101.187.5:58359/i","pattern":"[url:value = 'http://203.101.187.5:58359/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4ce6c9b-b14d-6e0b-e5a1-0000b0a4d947","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.202.187.105:58599/i","pattern":"[url:value = 'http://115.202.187.105:58599/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a27fa877-7be3-9a6c-b077-000003ac6195","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.175.26.181:34146/bin.sh","pattern":"[url:value = 'http://175.175.26.181:34146/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d9628c7-99a2-2410-6d89-000024a75dbd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/arm6","pattern":"[url:value = 'http://85.11.167.197/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1889e20a-f86e-21ee-987b-000001cd6a8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/mipsel","pattern":"[url:value = 'http://85.11.167.197/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c420f58-093d-df80-c41d-0000899306e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/ppc","pattern":"[url:value = 'http://85.11.167.197/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a911851-acc0-50d2-680e-00009c1b3ad8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/arm7","pattern":"[url:value = 'http://85.11.167.197/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2c5363b-cf4d-8ae7-b948-0000be5ae877","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/m68k","pattern":"[url:value = 'http://85.11.167.197/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aee902ed-a0db-80b6-1f94-0000beac3ead","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/mips","pattern":"[url:value = 'http://85.11.167.197/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4910ed0f-f410-20ff-1602-0000094d9f1f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/sh4","pattern":"[url:value = 'http://85.11.167.197/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e39849eb-2489-cab1-ee81-00008eae9536","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/arm4","pattern":"[url:value = 'http://85.11.167.197/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b8c9c29-0bce-096a-678b-0000fa1032b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/pm68k","pattern":"[url:value = 'http://194.26.192.173/bins/pm68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b71cc0f-04a0-2481-a4d8-0000bf67dbf0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/px86","pattern":"[url:value = 'http://194.26.192.173/bins/px86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84df82d5-bdf8-75fb-bfcf-000060ed877d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/parm6","pattern":"[url:value = 'http://194.26.192.173/bins/parm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ea97b03-4ff0-cee9-ed10-000095f140e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/parm","pattern":"[url:value = 'http://194.26.192.173/bins/parm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3d8b243-9281-7149-7748-0000d851e018","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/parm7","pattern":"[url:value = 'http://194.26.192.173/bins/parm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef4233a2-bbc4-b8ff-00a6-0000423389c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/x86_64","pattern":"[url:value = 'http://194.26.192.173/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92726e36-d14c-c7f1-325a-000091e58a27","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/pmpsl","pattern":"[url:value = 'http://194.26.192.173/bins/pmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4854398-166e-d3ec-a0f8-000041f0c72b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/pspc","pattern":"[url:value = 'http://194.26.192.173/bins/pspc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3911f96-2530-1148-9e4c-000047ba2c73","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/psh4","pattern":"[url:value = 'http://194.26.192.173/bins/psh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9745f3bc-e6a8-6777-290d-00000115452c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.218.67:53176/i","pattern":"[url:value = 'http://115.55.218.67:53176/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71020d31-fcca-02ea-bf79-00008a7fd519","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.25.33:45137/bin.sh","pattern":"[url:value = 'http://110.36.25.33:45137/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc98e404-795d-8516-e91f-000037b9c010","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.25.33:45137/i","pattern":"[url:value = 'http://110.36.25.33:45137/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff3de9b7-87c4-51b1-ac0e-0000e3b3a970","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.193.113:40215/i","pattern":"[url:value = 'http://120.28.193.113:40215/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79d5f4d9-2195-76cb-dddd-0000f047498a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.187.39.131:39653/i","pattern":"[url:value = 'http://2.187.39.131:39653/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b08f569b-42e6-b61d-d5d8-000094d6766c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.41.97:51870/i","pattern":"[url:value = 'http://42.230.41.97:51870/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18510372-d97d-eb23-f058-00009442cb29","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.86.82:33719/bin.sh","pattern":"[url:value = 'http://36.69.86.82:33719/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--955fd729-5107-2a02-fb91-0000f64727e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.7.221.147:56994/i","pattern":"[url:value = 'http://123.7.221.147:56994/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83550919-fb6d-c6c5-c02c-00002d42c3e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.79.41:41991/bin.sh","pattern":"[url:value = 'http://42.235.79.41:41991/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d21240cf-9e17-8286-61ff-00006d45aa4c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.234.37:36560/i","pattern":"[url:value = 'http://123.12.234.37:36560/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10e0bbe6-b95f-2b6d-275f-0000fe227ca7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.86.82:33719/i","pattern":"[url:value = 'http://36.69.86.82:33719/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e322413-6738-580c-648a-0000d329e8df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.146.110.122:34125/bin.sh","pattern":"[url:value = 'http://103.146.110.122:34125/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6adfcceb-97ed-d8a1-300a-000020e22d82","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.238.178.200:46827/bin.sh","pattern":"[url:value = 'http://112.238.178.200:46827/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e60ae0b-8cf1-5f28-5f77-000085155a3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.238.178.200:46827/i","pattern":"[url:value = 'http://112.238.178.200:46827/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--506c281c-48f4-65f4-5603-0000f8139c33","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.98.147.69:54271/bin.sh","pattern":"[url:value = 'http://115.98.147.69:54271/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--521512f5-abb7-d218-56ea-0000525060ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.146.110.122:34125/i","pattern":"[url:value = 'http://103.146.110.122:34125/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d155dcb3-15cf-f741-aa39-000005e22a5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/files/7061144442/nxumfOe.exe","pattern":"[url:value = 'http://62.60.226.140/files/7061144442/nxumfOe.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73297b44-03cb-cb9c-f388-00000d9c5890","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.190.133.180:45025/i","pattern":"[url:value = 'http://196.190.133.180:45025/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c03ec0f-f83c-fac9-bb33-000094e8efc5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.107.232:46123/i","pattern":"[url:value = 'http://125.43.107.232:46123/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc0f6add-1497-4fdd-dd96-00007e8a7dcd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.165.87.184:46171/bin.sh","pattern":"[url:value = 'http://175.165.87.184:46171/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a62dbe5-ec2a-62fe-d007-00009a2f4b1f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.142.66:59668/bin.sh","pattern":"[url:value = 'http://123.13.142.66:59668/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dd0cd72-81ff-8d90-ad62-00005b84825a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.202.104:39615/i","pattern":"[url:value = 'http://219.157.202.104:39615/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--287971a6-2a29-a898-f745-0000367ee57b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.165.87.184:46171/i","pattern":"[url:value = 'http://175.165.87.184:46171/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b138978-8564-daac-96c1-0000c06b1ef1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.10.145.33:33546/bin.sh","pattern":"[url:value = 'http://123.10.145.33:33546/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f15e070-b43b-b074-76a1-000093243ab6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.123.40.234:41791/bin.sh","pattern":"[url:value = 'http://182.123.40.234:41791/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--022fa51a-646b-23ce-f774-00009d6616ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.237.64:40459/bin.sh","pattern":"[url:value = 'http://119.179.237.64:40459/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b83224bd-5cd5-12cc-c075-000000cf9873","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.142.66:59668/i","pattern":"[url:value = 'http://123.13.142.66:59668/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66dcf73f-e787-d74b-e588-00000fd90ee0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.140.161.119:54327/bin.sh","pattern":"[url:value = 'http://222.140.161.119:54327/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae837782-befd-5e31-b82a-00000208b745","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.193.241:34414/i","pattern":"[url:value = 'http://123.14.193.241:34414/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc4f2eeb-79c5-457c-f77b-0000bca52f1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.106.196:55036/bin.sh","pattern":"[url:value = 'http://123.13.106.196:55036/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e346e63f-d467-d029-a66d-00004cda572f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.202.104:39615/bin.sh","pattern":"[url:value = 'http://219.157.202.104:39615/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dbed55e-6d7f-d121-424b-000042c2e9f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.13.229:41730/bin.sh","pattern":"[url:value = 'http://110.36.13.229:41730/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--360d6703-0ff9-4255-333d-0000a23d7a1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.234.166.234:40751/i","pattern":"[url:value = 'http://42.234.166.234:40751/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37adc380-62a0-9122-fe8f-00005df305c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.237.64:40459/i","pattern":"[url:value = 'http://119.179.237.64:40459/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52fe3c6e-686a-16db-7d38-00009fc90532","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.13.229:41730/i","pattern":"[url:value = 'http://110.36.13.229:41730/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4e5d3d1-c0bd-f0dd-47cc-000002489a66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.252.196.44:41579/i","pattern":"[url:value = 'http://112.252.196.44:41579/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fb35d5e-1f1d-6b73-d976-0000cf298724","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_457316565c5d19a2.cmd","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_457316565c5d19a2.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63ea9eb6-acec-8900-c25c-00009ab86b9d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.71.24.56:48673/bin.sh","pattern":"[url:value = 'http://36.71.24.56:48673/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0410252b-968b-8475-df96-0000352a2c28","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.206.76:59535/bin.sh","pattern":"[url:value = 'http://182.113.206.76:59535/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6083d4e8-b5b4-f26d-acb2-0000c2621657","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.39.88:32921/bin.sh","pattern":"[url:value = 'http://110.37.39.88:32921/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b58bf902-8f6e-48d5-f82b-000048e69129","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.71.24.56:48673/i","pattern":"[url:value = 'http://36.71.24.56:48673/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7d8dec4-da20-5a23-47c2-0000f563c9b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.44.116:38510/bin.sh","pattern":"[url:value = 'http://115.48.44.116:38510/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b426959-f871-1154-b91e-0000bbf6a058","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.206.76:59535/i","pattern":"[url:value = 'http://182.113.206.76:59535/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ede9c7de-4a1a-7de2-1845-00002e0c462c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.70.189:53510/bin.sh","pattern":"[url:value = 'http://110.36.70.189:53510/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bde65836-d7e0-d742-a53d-0000ef9b4c20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.89.210:38147/bin.sh","pattern":"[url:value = 'http://110.37.89.210:38147/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3a990e2-c1b9-4220-5d77-0000805bd085","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.39.88:32921/i","pattern":"[url:value = 'http://110.37.39.88:32921/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55fafa69-c0ca-fef7-e857-0000004ba761","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.138.181.201:51235/bin.sh","pattern":"[url:value = 'http://222.138.181.201:51235/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a240dc8a-f6dc-cc1d-c506-0000438510d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.70.189:53510/i","pattern":"[url:value = 'http://110.36.70.189:53510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12177447-354f-0e31-424f-00004923e7cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.231.254:56762/bin.sh","pattern":"[url:value = 'http://42.232.231.254:56762/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ab9b57f-a009-72ee-ba2b-000080d43b1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.44.116:38510/i","pattern":"[url:value = 'http://115.48.44.116:38510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da7b8d1b-a80c-0876-266a-0000adff4757","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.89.210:38147/i","pattern":"[url:value = 'http://110.37.89.210:38147/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--719635a4-bef5-eb2e-cc32-0000915a44a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.75.164:57996/i","pattern":"[url:value = 'http://42.235.75.164:57996/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9e33271-f2d2-8749-d1f0-00007536a083","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.140.161.119:54327/i","pattern":"[url:value = 'http://222.140.161.119:54327/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22aca6b0-f78b-ea89-1a81-000016154f30","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.153.92.244:48563/bin.sh","pattern":"[url:value = 'http://175.153.92.244:48563/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1530046-08d7-ad41-c4d8-00007203b443","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.47.23:54371/i","pattern":"[url:value = 'http://125.44.47.23:54371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e9c0f0e-e4c0-a366-47bb-000080c9ab3a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.165.9:33305/bin.sh","pattern":"[url:value = 'http://182.117.165.9:33305/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14575b1e-2959-7ced-9daf-00004e8e8b08","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.231.254:56762/i","pattern":"[url:value = 'http://42.232.231.254:56762/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bacde5cb-dda4-0d38-a527-0000af508511","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.220.232:55420/bin.sh","pattern":"[url:value = 'http://61.53.220.232:55420/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f3ee397-edcd-4cb8-26b8-0000b8185600","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.153.92.244:48563/i","pattern":"[url:value = 'http://175.153.92.244:48563/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f623911c-d292-1f0b-db3b-00002b77d565","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.77.172.60:34449/i","pattern":"[url:value = 'http://39.77.172.60:34449/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d06a61d-a615-5d2b-01c0-0000f1b6cbea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.100.206:37473/bin.sh","pattern":"[url:value = 'http://42.232.100.206:37473/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a50bfe6-c480-b2ad-f29c-0000512f0a05","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.100.206:37473/i","pattern":"[url:value = 'http://42.232.100.206:37473/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3f21768-5226-82fb-8289-0000e482c823","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.18.60:52528/bin.sh","pattern":"[url:value = 'http://110.36.18.60:52528/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5a70d13-1588-f112-590b-0000170a1044","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_mips","pattern":"[url:value = 'http://160.191.242.92/main_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0384ccc6-bca6-541b-4631-0000ecce7024","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.riscv64","pattern":"[url:value = 'http://160.191.242.92/pid.riscv64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33104e87-12b1-6cbc-f766-000063413a77","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/bot_arm7","pattern":"[url:value = 'http://160.191.242.92/bot_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75fba481-9128-72ef-2ff7-0000f4856615","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.ar6","pattern":"[url:value = 'http://160.191.242.92/pid.ar6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d57a165-a8b7-3c56-5d8d-0000f87905a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/x64","pattern":"[url:value = 'http://160.191.242.92/x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--898b39c5-6fb4-cc0c-ce4e-000017fcc69e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_m68k","pattern":"[url:value = 'http://160.191.242.92/main_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65d9bb92-040b-2b0a-3922-0000f2df3456","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.arm","pattern":"[url:value = 'http://160.191.242.92/vlxx.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4734e723-1e54-d379-aca4-0000fef62cce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.arm5","pattern":"[url:value = 'http://160.191.242.92/pid.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--347a4868-112b-26ad-8a78-00003ac2822d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.sh4","pattern":"[url:value = 'http://160.191.242.92/pid.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34ae34c6-a540-438d-3cb3-0000eb10d270","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_x86","pattern":"[url:value = 'http://160.191.242.92/main_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39859b9e-28d1-e403-332e-00000c9cf413","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.arm8","pattern":"[url:value = 'http://160.191.242.92/pid.arm8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83d8ece9-fdcd-0570-1eef-000028864804","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.i686","pattern":"[url:value = 'http://160.191.242.92/skid.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fb6f522-163f-2c13-5168-00008476d47e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/sh4eb","pattern":"[url:value = 'http://160.191.242.92/sh4eb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8134789d-c614-2bee-dfbe-0000c7ef69c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.arm7","pattern":"[url:value = 'http://160.191.242.92/skid.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66d82739-dbad-34d1-8edf-00008d017354","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_arm6","pattern":"[url:value = 'http://160.191.242.92/main_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--383c4450-ee30-adf1-f8e5-000023b09da0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.sh4","pattern":"[url:value = 'http://160.191.242.92/skid.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cff4350f-0dd8-39b2-1586-0000e7cbf6ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.powerpc","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0660e55f-a6ed-739f-53bb-0000fd2d4ad4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.x86_64","pattern":"[url:value = 'http://160.191.242.92/pid.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c363fbf-e1c6-9c59-5056-0000ad10433a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.x86_64","pattern":"[url:value = 'http://160.191.242.92/vlxx.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--191c0508-646b-827e-07a5-00009313bc05","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_ppc","pattern":"[url:value = 'http://160.191.242.92/main_ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fcc911e-8a40-fa24-0706-00001846fe3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.sh4eb","pattern":"[url:value = 'http://160.191.242.92/pid.sh4eb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--070b8f95-9aa7-8daa-d77f-0000246762be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/mpsl","pattern":"[url:value = 'http://160.191.242.92/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3562cef2-8a64-97f4-9afe-0000b4f31891","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/sora.x86","pattern":"[url:value = 'http://160.191.242.92/sora.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0a37bed-6a74-dbaa-9e3d-0000d6585492","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.mips","pattern":"[url:value = 'http://160.191.242.92/vlxx.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce7a94cb-ebc1-0b18-dd53-0000cc71ebfd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.2.112:41839/i","pattern":"[url:value = 'http://123.13.2.112:41839/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41e128c6-0d63-39c5-0672-0000eb04d359","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/payload.xml","pattern":"[url:value = 'http://160.191.242.92/payload.xml']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7b1e016-ccd2-167b-5758-00000ec5ea3d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/ipmiv2.xml","pattern":"[url:value = 'http://160.191.242.92/ipmiv2.xml']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd1c8d45-e80b-2cfd-e87b-0000180bb011","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/ruck","pattern":"[url:value = 'http://160.191.242.92/ruck']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3aa82002-9bc3-b3a1-4f18-0000ba7b9e82","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/riscv64","pattern":"[url:value = 'http://160.191.242.92/riscv64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--622e6250-7df3-5a31-7d9b-000013d76f96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/spc","pattern":"[url:value = 'http://160.191.242.92/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd6127b-20ea-c217-cdb9-0000bb96c586","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.i686","pattern":"[url:value = 'http://160.191.242.92/pid.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74db6151-700d-9284-d8b8-0000f4ef50e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.arm7","pattern":"[url:value = 'http://160.191.242.92/vlxx.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63398dbe-5446-3b8b-6bbb-0000ea9ef8d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.amd64","pattern":"[url:value = 'http://160.191.242.92/skid.amd64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--595f9304-4690-5c48-b610-000052c77897","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/armeb","pattern":"[url:value = 'http://160.191.242.92/armeb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6492f1f8-c27f-c767-1123-00005c074536","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.arm64","pattern":"[url:value = 'http://160.191.242.92/skid.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--644dc794-0436-f899-9cdd-000082ba2942","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/i686","pattern":"[url:value = 'http://160.191.242.92/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffa0af22-c33d-632c-e5c1-000030f6d411","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/powerpc","pattern":"[url:value = 'http://160.191.242.92/powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fef57d8a-fc38-f63a-6ecc-00004f92da2e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/m68k","pattern":"[url:value = 'http://160.191.242.92/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bbe9eb5-1c5d-d988-4691-0000f4f84021","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.sh4","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f12fad2-3832-8ea2-1712-00006791dc90","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.x86_64","pattern":"[url:value = 'http://160.191.242.92/skid.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6925f738-d0f7-42e1-9528-0000cef752d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.armeb","pattern":"[url:value = 'http://160.191.242.92/pid.armeb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--293fe3bc-53b0-ac8f-8320-0000fb07cfe1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/x86_64","pattern":"[url:value = 'http://160.191.242.92/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d864e0f9-3fd7-7bbc-ccc6-00005ac25b84","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/arm7n","pattern":"[url:value = 'http://160.191.242.92/arm7n']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a93a860f-4e70-cca4-16c7-000054ffe445","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.arm7","pattern":"[url:value = 'http://160.191.242.92/pid.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0b4f903-54c8-e29b-dcc1-0000ff42d676","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.ar5","pattern":"[url:value = 'http://160.191.242.92/skid.ar5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8e1df07-bd2e-b2c2-239a-0000209458cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.sh4","pattern":"[url:value = 'http://160.191.242.92/vlxx.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d17683ca-4d91-a9ec-4523-0000c1864968","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_arm","pattern":"[url:value = 'http://160.191.242.92/main_arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d7980ae-bc82-4acb-d576-000035ca642a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/t","pattern":"[url:value = 'http://160.191.242.92/t']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b4119db-29ad-df80-1b1b-0000ef7147fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.aarch64","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--489eed4c-5f94-9ee7-02a4-0000719102a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/armv7l","pattern":"[url:value = 'http://160.191.242.92/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11a66376-df22-26bb-d1e6-0000d56f6fe4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/arm6","pattern":"[url:value = 'http://160.191.242.92/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d429cb3-71a7-d44c-fc07-00007648e030","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.mips","pattern":"[url:value = 'http://160.191.242.92/pid.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--559cce64-d5f3-da03-bf09-0000176803a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.powerpc","pattern":"[url:value = 'http://160.191.242.92/skid.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4128aa3f-1cef-0c08-acb3-0000ba1c1bdb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.ppc","pattern":"[url:value = 'http://160.191.242.92/pid.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d6ea607-b172-1e8f-adba-0000a36e0456","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.ppc","pattern":"[url:value = 'http://160.191.242.92/skid.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58ac6b03-eb24-816b-a895-0000af59a600","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/av.sh","pattern":"[url:value = 'http://160.191.242.92/av.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03dc51c7-1f7c-f219-1e22-00004c533782","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.arm6","pattern":"[url:value = 'http://160.191.242.92/vlxx.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab1583f6-ced9-1292-3c31-0000384c6504","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/aarch64","pattern":"[url:value = 'http://160.191.242.92/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--549a4467-8e22-169b-3e9b-00003d216804","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_mips.orig","pattern":"[url:value = 'http://160.191.242.92/main_mips.orig']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f3a19b1-3d84-35cb-c238-00006de6a14c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.arm5","pattern":"[url:value = 'http://160.191.242.92/skid.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80010c9e-8b98-9179-5222-0000d849af4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.x86","pattern":"[url:value = 'http://160.191.242.92/vlxx.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e37bfebf-da6d-c288-1735-0000779c98e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/zero.mips","pattern":"[url:value = 'http://160.191.242.92/zero.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--316ea865-3194-2837-cb89-000076be36ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.m68k","pattern":"[url:value = 'http://160.191.242.92/pid.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3274e0b5-159a-68cd-b978-00003ef53fae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.mipsel","pattern":"[url:value = 'http://160.191.242.92/skid.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54bbd2b7-9986-b8ae-8c29-0000dbda60f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/ar6","pattern":"[url:value = 'http://160.191.242.92/ar6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8025acb-b241-b5e8-1360-0000c7d6e855","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/arm","pattern":"[url:value = 'http://160.191.242.92/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--432f17ea-831b-6f4d-53de-0000fe51a954","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/k.sh","pattern":"[url:value = 'http://160.191.242.92/k.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd88ba46-a446-15aa-c1fc-00007d28f901","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/wget.sh","pattern":"[url:value = 'http://160.191.242.92/wget.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dd77b99-0c14-a38c-83ea-0000d2c821b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92///mpsl","pattern":"[url:value = 'http://160.191.242.92///mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87ac56dd-5cd1-992e-cd26-000042a6f65b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.ppc64","pattern":"[url:value = 'http://160.191.242.92/pid.ppc64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f45d5ef-325f-acb0-2ea7-0000ac315609","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/jenkins.py","pattern":"[url:value = 'http://160.191.242.92/jenkins.py']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6068dc09-d2e9-54b2-53f8-000095431d38","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/ppc","pattern":"[url:value = 'http://160.191.242.92/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b787277-7d87-935a-6ec0-0000e61fd91a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/massload","pattern":"[url:value = 'http://160.191.242.92/massload']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2ab619e-5629-d40e-b474-00003e19f030","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92///main_mips","pattern":"[url:value = 'http://160.191.242.92///main_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e6d6dd2-9865-3238-4983-0000992bac61","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.ar","pattern":"[url:value = 'http://160.191.242.92/pid.ar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0129e2b0-a18a-06da-3e30-00001fd2b2bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.aarch64","pattern":"[url:value = 'http://160.191.242.92/skid.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de3db699-268b-6bfc-a74b-0000ec438320","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.arm6","pattern":"[url:value = 'http://160.191.242.92/pid.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecf2f53b-80fd-0a7b-8fdd-0000e630c9fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.ar5","pattern":"[url:value = 'http://160.191.242.92/pid.ar5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec8f4f3b-1499-9e1d-d2b9-0000d6ae8248","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.m68k","pattern":"[url:value = 'http://160.191.242.92/vlxx.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89422cfd-da1f-204f-90b7-0000e889eeb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.arm","pattern":"[url:value = 'http://160.191.242.92/pid.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--660b79cd-0aef-b2b9-df2a-0000042e5bec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/i586","pattern":"[url:value = 'http://160.191.242.92/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67c913fa-7884-cdb9-5307-0000cf728849","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/i486","pattern":"[url:value = 'http://160.191.242.92/i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b33623e6-df0e-bd21-8024-0000280a0bf7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.ar5","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.ar5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6286057f-cc8e-f541-eb2b-0000d277b8f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/i386","pattern":"[url:value = 'http://160.191.242.92/i386']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e7a6d19-48a5-f699-a8e6-0000870250f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.ar","pattern":"[url:value = 'http://160.191.242.92/skid.ar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5107ecb0-7ee3-f086-bb3c-00005d8792ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.arm7","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3229db90-217a-45f8-b202-0000291b79d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.aarch64","pattern":"[url:value = 'http://160.191.242.92/vlxx.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c68c43e6-5570-dfe9-01cf-000066433ab7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.powerpc","pattern":"[url:value = 'http://160.191.242.92/pid.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0afcba2f-8887-f651-88e3-00006d46bc7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.riscv64","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.riscv64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92396f32-2a70-dc1b-29b2-00006ef98ba2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.aarch64","pattern":"[url:value = 'http://160.191.242.92/pid.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--554c6221-3934-8850-ab89-0000e5586db2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.mips","pattern":"[url:value = 'http://160.191.242.92/skid.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6aefeee6-59a0-a751-0318-0000a951c85d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/ar","pattern":"[url:value = 'http://160.191.242.92/ar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c953c2da-82bf-1da0-ab4b-00007fc64003","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.m68k","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11df17af-11c7-dcc1-fd2b-000035bd1431","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_arm7","pattern":"[url:value = 'http://160.191.242.92/main_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0eba982f-b0bf-b685-ac63-0000554b1efd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.ar7","pattern":"[url:value = 'http://160.191.242.92/skid.ar7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5185dc0d-93b6-1c74-ae17-00004cf12b10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/armv6l","pattern":"[url:value = 'http://160.191.242.92/armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--850420c5-d0ea-8604-ded2-0000f1fbf13b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.arm","pattern":"[url:value = 'http://160.191.242.92/skid.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ddaedc7-e36f-d7db-9fba-0000ed40734d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/x86","pattern":"[url:value = 'http://160.191.242.92/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffd17683-965d-aee5-4c73-00009fb4dcba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_arm5","pattern":"[url:value = 'http://160.191.242.92/main_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88af32cc-3703-c208-79df-0000c7dac00a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/arm5","pattern":"[url:value = 'http://160.191.242.92/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99422cb4-beb4-804a-69ac-000097c258e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/bot_arm64","pattern":"[url:value = 'http://160.191.242.92/bot_arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a448105c-a12f-6f68-6a20-0000a315492d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/bot_32","pattern":"[url:value = 'http://160.191.242.92/bot_32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f37b9f46-4e4b-ac28-e12c-0000b16f8a4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_aarch64","pattern":"[url:value = 'http://160.191.242.92/main_aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--857ff60c-661e-2591-68f9-00007f3096d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.mips","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e53c3d34-60e3-cf29-03ea-000092933c3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.mipsel","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b40b0ec4-851d-d1ec-0e0b-00006b818f80","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/run_adb.sh","pattern":"[url:value = 'http://160.191.242.92/run_adb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2d9495c-a7a6-4478-738b-00004f640cf4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/mips","pattern":"[url:value = 'http://160.191.242.92/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0459f9db-c0a1-e38a-66fb-0000a2632cdf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/mipsel","pattern":"[url:value = 'http://160.191.242.92/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02fc9417-b4b1-5d9e-5e53-00004c390170","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.ar7","pattern":"[url:value = 'http://160.191.242.92/pid.ar7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c85a2753-6e5e-effd-6fe2-0000cbf7df00","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.x86_64","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79bda8b9-ab52-beac-643f-0000edf77998","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.ar6","pattern":"[url:value = 'http://160.191.242.92/skid.ar6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7075cbda-dcb1-6b04-9397-00007c097e0e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_mpsl","pattern":"[url:value = 'http://160.191.242.92/main_mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23bce221-cef6-4eeb-366c-000063660793","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/ar7","pattern":"[url:value = 'http://160.191.242.92/ar7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--196056f7-10aa-77df-7e66-0000e5aebb68","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.m68k","pattern":"[url:value = 'http://160.191.242.92/skid.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c9a9bf1-306c-b31c-aedb-0000c21f75ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.x86","pattern":"[url:value = 'http://160.191.242.92/pid.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ad5007d-e5e3-e52a-5561-00005ee6986c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.arm5","pattern":"[url:value = 'http://160.191.242.92/vlxx.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c4ee75f-73cc-b810-b1f9-000013cd25f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_sh4","pattern":"[url:value = 'http://160.191.242.92/main_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a3f725c-b4be-eebf-781e-00003abfa419","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.ar6","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.ar6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f33b8eb-d57d-543e-c76d-0000c20d3f16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.ar","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.ar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60dc97c9-b61e-0186-8a6b-0000db6d6a23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.x86","pattern":"[url:value = 'http://160.191.242.92/skid.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f6f4281-a5cd-da21-12fd-00000bc36578","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_x86_64","pattern":"[url:value = 'http://160.191.242.92/main_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e09ea4e8-33fe-101d-271d-00008e5b03f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.mpsl","pattern":"[url:value = 'http://160.191.242.92/skid.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7abb0d6e-f572-d4e6-6ce6-00005f22b7b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.arm64","pattern":"[url:value = 'http://160.191.242.92/pid.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--305c412c-642e-7d16-17f8-00004e9e9981","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/bot_64","pattern":"[url:value = 'http://160.191.242.92/bot_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1571bd24-0b7b-73ed-acec-0000bd5b3ad8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.mpsl","pattern":"[url:value = 'http://160.191.242.92/vlxx.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adb33d50-b224-2469-2cf6-0000a04ac13b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.ppc","pattern":"[url:value = 'http://160.191.242.92/vlxx.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66a153e0-628d-d4d5-9a6b-00006dd30881","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/arm7","pattern":"[url:value = 'http://160.191.242.92/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7b5c7b9-95fb-7a7a-107a-00000149865c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/xparm7","pattern":"[url:value = 'http://160.191.242.92/xparm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f633480b-841c-18b9-8776-00007f530ea2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.arm6","pattern":"[url:value = 'http://160.191.242.92/skid.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b06ff38-96c7-fb9d-3dc2-0000a449a9ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.mipsel","pattern":"[url:value = 'http://160.191.242.92/pid.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--153a3e5e-6dce-d527-8409-0000159d84ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/sh4","pattern":"[url:value = 'http://160.191.242.92/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5779a757-4968-9591-b9cb-0000551a9e7a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92///main_mpsl","pattern":"[url:value = 'http://160.191.242.92///main_mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdb2830d-d341-833f-0262-0000c96fcf18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/ar5","pattern":"[url:value = 'http://160.191.242.92/ar5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58851973-71b6-6e95-9edc-0000a4134d48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/adbload","pattern":"[url:value = 'http://160.191.242.92/adbload']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--542e732d-9279-0530-5a07-00001c27b7b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/jenload","pattern":"[url:value = 'http://160.191.242.92/jenload']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9f1184f-ad5c-81fc-720f-0000c711d579","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/dvrk","pattern":"[url:value = 'http://160.191.242.92/dvrk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46445693-794e-0886-d357-000096733c1a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.13.156:47216/i","pattern":"[url:value = 'http://110.36.13.156:47216/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b071edb8-dcf6-04b8-4d2e-0000f3e926bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.225.177.252:53050/bin.sh","pattern":"[url:value = 'http://112.225.177.252:53050/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--027172f5-2f30-6277-a54e-00007d72ae49","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.225.177.252:53050/i","pattern":"[url:value = 'http://112.225.177.252:53050/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f465040-07ee-3b07-30d7-0000a1e87180","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/activemq","pattern":"[url:value = 'http://160.191.242.92/activemq']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8bdd882-0094-24cb-30a3-0000eaf60ace","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.26.226.42:41542/bin.sh","pattern":"[url:value = 'http://117.26.226.42:41542/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeba7a0b-6ee6-c65b-7b61-00000647610f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.186.82.28:41113/bin.sh","pattern":"[url:value = 'http://105.186.82.28:41113/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7de5aed3-0a27-605f-1255-00009b5d492a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.180.141/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://130.12.180.141/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a364ea07-74eb-5ceb-e6ef-00001f77edaf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/massloader_dvr.new","pattern":"[url:value = 'http://160.191.242.92/massloader_dvr.new']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52314986-2fde-7f75-ced7-000061abd6b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.43.119.226:38433/bin.sh","pattern":"[url:value = 'http://175.43.119.226:38433/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd7ad15-65af-44aa-3bc7-0000ed85a11b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.137.203:37078/bin.sh","pattern":"[url:value = 'http://182.121.137.203:37078/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--408873a0-8d27-3f7f-2b68-0000ca7f39a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/cnc_new_x64","pattern":"[url:value = 'http://160.191.242.92/cnc_new_x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6ff2082-aefb-0ebf-56f9-0000ae414189","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/jenbrute","pattern":"[url:value = 'http://160.191.242.92/jenbrute']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d460d90f-fdc8-3b25-78eb-0000e2621d49","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.209.155.133:42828/bin.sh","pattern":"[url:value = 'http://27.209.155.133:42828/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16041bb1-bc49-8dd0-fc2d-00009eb1de1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_57b60302f7986a48.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_57b60302f7986a48.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfcb6f5f-ae3c-0cc8-e751-00007d4540bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_a6ea4f6f6031c128.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_a6ea4f6f6031c128.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f58fcb7-8a4f-de20-c5f0-0000e9deda63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/runme.sh","pattern":"[url:value = 'http://46.151.182.200/runme.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7210a6cc-6937-14ff-6592-0000892921f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://raw.githubusercontent.com/mhsanaei/3x-ui/master/install.sh","pattern":"[url:value = 'https://raw.githubusercontent.com/mhsanaei/3x-ui/master/install.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4f76385-357e-e9d3-ef51-00007e81c3ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://asegurar2026.duckdns.org/sostener2.vbs","pattern":"[url:value = 'http://asegurar2026.duckdns.org/sostener2.vbs']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fff62abc-0944-605b-dc76-00000387d924","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/Exodus.sh","pattern":"[url:value = 'http://94.154.43.26:6677/Exodus.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7924de12-75ab-55fa-9776-0000c86c3e89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://141.11.100.247/fktn62.sh","pattern":"[url:value = 'http://141.11.100.247/fktn62.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5327886-b28d-1441-66fe-00003eff8047","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://xunyyymdfv.oss-cn-hongkong.aliyuncs.com/uuyc.4.1.0.zip","pattern":"[url:value = 'https://xunyyymdfv.oss-cn-hongkong.aliyuncs.com/uuyc.4.1.0.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9e93dfc-81fd-b887-2367-0000fb96dd91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_cbc50300e3486e0c.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_cbc50300e3486e0c.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db160b35-da34-5753-d3b6-0000c1f60e94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.43.119.226:38433/i","pattern":"[url:value = 'http://175.43.119.226:38433/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9cbbe10-4e0e-5a6c-e389-00009ea07e69","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.45.148.93:57695/i","pattern":"[url:value = 'http://125.45.148.93:57695/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c23e94f-0d89-4ddd-e34b-0000a26bb6b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.186.82.28:41113/i","pattern":"[url:value = 'http://105.186.82.28:41113/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93bd5623-1a48-370d-0dec-0000974c8867","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.112.68:46964/i","pattern":"[url:value = 'http://182.126.112.68:46964/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd4bc331-16e9-92ac-9825-0000d006d661","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.18.60:52528/i","pattern":"[url:value = 'http://110.36.18.60:52528/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5051b3e7-32cc-bef7-1eb0-00008b5f1fc2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.209.155.133:42828/i","pattern":"[url:value = 'http://27.209.155.133:42828/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--853dad79-c373-dec4-8eda-0000ec979841","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.193.35.180:45367/i","pattern":"[url:value = 'http://27.193.35.180:45367/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2840d7ec-cdc7-45eb-e332-0000ec2b7e0a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.217.218:36543/bin.sh","pattern":"[url:value = 'http://42.224.217.218:36543/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65afd37f-ae16-2ed1-aa0e-000047a74203","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.43.60:47091/i","pattern":"[url:value = 'http://125.44.43.60:47091/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d5d40c8-d00e-0d89-bb3b-00008e69e027","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/arm5","pattern":"[url:value = 'http://94.154.43.26:6677/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74ac160e-0414-f3b1-5c92-00003d1032c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9ce5ed","pattern":"[url:value = 'http://5.182.210.174/9ce5ed']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89f7fd64-b8ed-149e-85db-00003963de94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f97e6f","pattern":"[url:value = 'http://5.182.210.174/f97e6f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d0d5e52-e932-e5b8-a1be-0000c1c7b36a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6e6855","pattern":"[url:value = 'http://5.182.210.174/6e6855']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16e7d967-4a05-7573-dacf-0000d77a9190","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d2965f","pattern":"[url:value = 'http://5.182.210.174/d2965f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7412713c-9dce-6724-7afd-00001c9a60d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/78dbc7","pattern":"[url:value = 'http://5.182.210.174/78dbc7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d34b9737-c369-7225-09f1-00000a5c32ad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/10d086","pattern":"[url:value = 'http://5.182.210.174/10d086']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76b87dd1-adc8-495f-1038-0000271626da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0df469","pattern":"[url:value = 'http://5.182.210.174/0df469']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b4df4dd-d770-c910-4427-0000099afa32","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ef75b2","pattern":"[url:value = 'http://5.182.210.174/ef75b2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ed33892-916f-98f7-9ff7-000002a4162b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f6d64f","pattern":"[url:value = 'http://5.182.210.174/f6d64f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f563229d-c08b-db47-88bd-000072b4183a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ea7693","pattern":"[url:value = 'http://5.182.210.174/ea7693']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--180d21f4-61fb-e1e0-53ae-0000b495f7e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/ZTMe","pattern":"[url:value = 'http://129.121.110.105/ZTMe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d723904-2a49-de59-d741-000043f070d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f98144","pattern":"[url:value = 'http://5.182.210.174/f98144']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bc6fc3d-20b1-f3c0-2799-000012cbfa02","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/af2ec4","pattern":"[url:value = 'http://5.182.210.174/af2ec4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26679570-6408-d51e-4a8d-00007f67a77c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0e4138","pattern":"[url:value = 'http://5.182.210.174/0e4138']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5964da3a-1fe0-bd52-1434-0000ec82ad65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/df5d68","pattern":"[url:value = 'http://5.182.210.174/df5d68']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0a56e5e-9755-85d5-4455-0000cf96579a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/vJB","pattern":"[url:value = 'http://129.121.110.105/vJB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11c0fa24-0ab8-98d5-fefe-0000be056004","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/VOgA","pattern":"[url:value = 'http://129.121.110.105/VOgA']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cf03943-1c24-6b0e-a712-00003593098d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d97f08","pattern":"[url:value = 'http://5.182.210.174/d97f08']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4b00099-a644-8680-47d7-0000cdd575e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3c14b4","pattern":"[url:value = 'http://5.182.210.174/3c14b4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4616dd8-6b3f-16a3-4ce8-00009d0a65b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/90e80a","pattern":"[url:value = 'http://5.182.210.174/90e80a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3a9a90a-290b-815f-9da6-0000292edc37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/660bc9","pattern":"[url:value = 'http://5.182.210.174/660bc9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29041e05-d192-9c87-f4bc-000021917caa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/839ec9","pattern":"[url:value = 'http://5.182.210.174/839ec9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62832652-15b8-fec1-4e08-00002c21eeac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a5d360","pattern":"[url:value = 'http://5.182.210.174/a5d360']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30c5a9d1-aa30-8d86-bf3f-0000ecf62b06","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6b72d3","pattern":"[url:value = 'http://5.182.210.174/6b72d3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dd54f54-3e4a-269c-7213-00001e9bb6ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2bd33f","pattern":"[url:value = 'http://5.182.210.174/2bd33f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d03df392-eb79-0bd2-fb08-00006d18d78f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/42736b","pattern":"[url:value = 'http://5.182.210.174/42736b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc4fa57e-91cc-7a19-586d-00009f0a14a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/51f300","pattern":"[url:value = 'http://5.182.210.174/51f300']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--359231c6-3139-7f9f-8974-0000b9085ab3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bed3aa","pattern":"[url:value = 'http://5.182.210.174/bed3aa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79415c70-1601-c27a-1c5e-0000b7524ed9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/db7b9c","pattern":"[url:value = 'http://5.182.210.174/db7b9c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfadac9c-97e4-a78d-0460-0000aaaa2845","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1d4271","pattern":"[url:value = 'http://5.182.210.174/1d4271']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bcce745-dbc5-0c65-32c2-000001cae15e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cc89e2","pattern":"[url:value = 'http://5.182.210.174/cc89e2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcfd9ad4-7bea-e7a1-57a8-0000365434af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/021219","pattern":"[url:value = 'http://5.182.210.174/021219']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2951d848-27bd-ce12-6473-0000df72b78a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/824d82","pattern":"[url:value = 'http://5.182.210.174/824d82']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56599372-4c17-11ce-87c3-0000ebd8c94f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/78887f","pattern":"[url:value = 'http://5.182.210.174/78887f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6aa043dd-b4f2-8d91-fe7c-00007ca55c89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9c504a","pattern":"[url:value = 'http://5.182.210.174/9c504a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--566b6290-0ae4-a20b-4588-000084ce4cfd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9f15f6","pattern":"[url:value = 'http://5.182.210.174/9f15f6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2348f4cc-568a-122c-9832-00006414c7b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/JPO","pattern":"[url:value = 'http://129.121.110.105/JPO']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f73505b0-3f87-da1e-8e5c-00001aec8b2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/57980e","pattern":"[url:value = 'http://5.182.210.174/57980e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1173dffe-e338-fee7-bd61-00008480e233","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/69e697","pattern":"[url:value = 'http://5.182.210.174/69e697']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7410f74b-11bd-e33e-fa27-0000cef340e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a82d92","pattern":"[url:value = 'http://5.182.210.174/a82d92']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc906ff7-d97b-e6db-9013-00005697c41b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0aed7d","pattern":"[url:value = 'http://5.182.210.174/0aed7d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--289134f1-8183-2e78-19fe-00007c520c44","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/86521e","pattern":"[url:value = 'http://5.182.210.174/86521e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81353439-3b10-3b35-ff16-00003255ace4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bfeb03","pattern":"[url:value = 'http://5.182.210.174/bfeb03']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b416de8c-d009-46fc-4bda-0000f736fa3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/fcfd06","pattern":"[url:value = 'http://5.182.210.174/fcfd06']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6a7fed8-fde0-10a0-95a0-0000b561dbf8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/sCy","pattern":"[url:value = 'http://129.121.110.105/sCy']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7976471-e744-80a9-a8e8-0000cebfef2a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/41cb7b","pattern":"[url:value = 'http://5.182.210.174/41cb7b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebb046e1-9a01-4864-18ec-00003114a4dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e67edd","pattern":"[url:value = 'http://5.182.210.174/e67edd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fba3cb8c-69da-7399-8584-00007b885b66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/05ac9f","pattern":"[url:value = 'http://5.182.210.174/05ac9f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--894aca1a-078d-9ffb-ae13-000042dbf4cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f76f77","pattern":"[url:value = 'http://5.182.210.174/f76f77']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca4101cf-4093-59bf-3e31-00007645d45e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7b2025","pattern":"[url:value = 'http://5.182.210.174/7b2025']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3af01015-4dee-d8e0-1738-000019e4c442","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e7e17e","pattern":"[url:value = 'http://5.182.210.174/e7e17e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfba318e-4d1c-a42d-57df-0000f2342ecb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cf3603","pattern":"[url:value = 'http://5.182.210.174/cf3603']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c67a53f-834c-f00d-8708-0000dbe75b58","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3aa8b4","pattern":"[url:value = 'http://5.182.210.174/3aa8b4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92addbe3-3ab0-d1dc-8f35-00009579e844","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/spc","pattern":"[url:value = 'http://43.98.174.233/release/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--433e02f9-6e5d-3ec2-00b8-0000bd34729b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/arm6","pattern":"[url:value = 'http://43.98.174.233/release/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--543d97b7-907a-553d-a4c9-0000520ffda3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/DjEq","pattern":"[url:value = 'http://129.121.110.105/DjEq']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f6265b7-dd30-aa67-80ee-00008f5132c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/1htR","pattern":"[url:value = 'http://129.121.110.105/1htR']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac6d1c05-14e1-948b-3ef8-000027c9c751","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/m68k","pattern":"[url:value = 'http://43.98.174.233/release/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec8f2db5-a571-98ef-d7e3-00006acebde7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/98oE","pattern":"[url:value = 'http://129.121.110.105/98oE']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--420e8fce-5f9f-6479-611e-000034e45725","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/2EUE","pattern":"[url:value = 'http://129.121.110.105/2EUE']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90eb65ba-7791-39d5-bf93-000013ed9aea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/ppc","pattern":"[url:value = 'http://43.98.174.233/release/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af91646e-6a24-1c2a-611d-000030a6ae5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/x86_64","pattern":"[url:value = 'http://43.98.174.233/release/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da375343-003b-c111-9b3d-0000af81dd75","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/arm5","pattern":"[url:value = 'http://43.98.174.233/release/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e04128d3-0062-b015-ee83-0000273f118b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/mips","pattern":"[url:value = 'http://43.98.174.233/release/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3439326f-bf29-c46a-ec8e-0000058815fe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/arm7","pattern":"[url:value = 'http://43.98.174.233/release/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5593ee1a-68ec-1c36-4f9a-00004c3c7fc1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/mpsl","pattern":"[url:value = 'http://43.98.174.233/release/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5881e378-2789-564e-ef59-000041786f87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/arm","pattern":"[url:value = 'http://43.98.174.233/release/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd595474-3b5f-35f8-b3b4-00006beef49f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/x86","pattern":"[url:value = 'http://43.98.174.233/release/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8fee197-8381-ad9e-14b7-0000114af685","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.4.69:45512/i","pattern":"[url:value = 'http://110.37.4.69:45512/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3789505d-0ea9-6100-e5f9-0000becd9eaa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/cCf","pattern":"[url:value = 'http://129.121.110.105/cCf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0485d5b-54b5-3a78-34df-0000e38d6e94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/86D","pattern":"[url:value = 'http://129.121.110.105/86D']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a706ed47-2899-c955-a555-00008310f6d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1c7216","pattern":"[url:value = 'http://5.182.210.174/1c7216']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce4daf6d-96b7-56c6-4442-0000958b8018","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/OLE5","pattern":"[url:value = 'http://129.121.110.105/OLE5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63632005-5309-fc4e-8c89-0000b3829366","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b08f0c","pattern":"[url:value = 'http://5.182.210.174/b08f0c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab7aa58e-e930-1197-b004-00007c7da301","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c3efb4","pattern":"[url:value = 'http://5.182.210.174/c3efb4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56ca4338-e4c8-f811-7f65-00007eebc6b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/aWG","pattern":"[url:value = 'http://129.121.110.105/aWG']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dfbad18-a33d-e9e0-acc6-0000d7855e3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/072508","pattern":"[url:value = 'http://5.182.210.174/072508']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b28e88bd-63bd-b93e-0844-0000c0aa943b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0d2891","pattern":"[url:value = 'http://5.182.210.174/0d2891']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46f66748-eacc-27a4-c15f-0000f49d33d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0089b9","pattern":"[url:value = 'http://5.182.210.174/0089b9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0c59c6a-5af7-4a37-30c6-000087ccf8c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/5f60c7","pattern":"[url:value = 'http://5.182.210.174/5f60c7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d10e1ccb-bf98-1f58-a16f-000068434c84","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6cd6ef","pattern":"[url:value = 'http://5.182.210.174/6cd6ef']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af893644-78c8-c32d-7404-00009e9dcaec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/50fc1e","pattern":"[url:value = 'http://5.182.210.174/50fc1e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--644a66c8-5a49-46e5-a3ae-0000ce64e69d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/N2J2","pattern":"[url:value = 'http://129.121.114.124/N2J2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ca0f290-9c87-5a69-6b9a-0000f939dd05","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d236bf","pattern":"[url:value = 'http://5.182.210.174/d236bf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b04f85a-4576-6199-6181-00004e55413f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/MyS","pattern":"[url:value = 'http://129.121.114.124/MyS']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3a1f071-07a2-304e-bae7-0000142835f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/tbW","pattern":"[url:value = 'http://129.121.110.105/tbW']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5f4937f-20ec-7472-889e-00004b6785ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/71431a","pattern":"[url:value = 'http://5.182.210.174/71431a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad4df1fd-b7ee-fbbd-5d49-00004ca04851","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/8ZG","pattern":"[url:value = 'http://129.121.114.124/8ZG']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91222a0b-8801-28ab-a578-000042282712","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/dS74","pattern":"[url:value = 'http://129.121.114.124/dS74']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--baac8dcb-9d62-a9f5-0c49-000038c13570","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c70dba","pattern":"[url:value = 'http://5.182.210.174/c70dba']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fb4ce61-7088-89f8-44bd-0000241669e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/de3259","pattern":"[url:value = 'http://5.182.210.174/de3259']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d818f8eb-bcde-2fb4-72de-00009ec889d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/jdDj","pattern":"[url:value = 'http://129.121.114.124/jdDj']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ba46951-b756-d28f-de96-0000fc8cb61d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/VFgi","pattern":"[url:value = 'http://129.121.110.105/VFgi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e41dac5-f0b3-3729-0af4-0000191e4d98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/gEK","pattern":"[url:value = 'http://129.121.114.124/gEK']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82c2b695-15f4-2727-4667-0000c85b9595","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0e216c","pattern":"[url:value = 'http://5.182.210.174/0e216c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a74d7558-7433-22eb-6129-0000ccfc8a9f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2adcae","pattern":"[url:value = 'http://5.182.210.174/2adcae']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a694c277-c56c-36e2-8129-0000ab66d94c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/191276","pattern":"[url:value = 'http://5.182.210.174/191276']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b33835fe-147e-bbc1-5f18-0000c11f61ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e47c56","pattern":"[url:value = 'http://5.182.210.174/e47c56']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d9f65d9-5e72-5806-8308-00000e145a0b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0c4b84","pattern":"[url:value = 'http://5.182.210.174/0c4b84']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--625e9390-23e7-bffe-06df-0000dfda5816","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/35079b","pattern":"[url:value = 'http://5.182.210.174/35079b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73938623-2411-5c90-01bf-0000caa24057","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.143/bot","pattern":"[url:value = 'http://217.60.195.143/bot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d56f4622-18ca-89c4-058c-0000b49143bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9fdeb7","pattern":"[url:value = 'http://5.182.210.174/9fdeb7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b70fa70-05ee-b610-3e21-00001ed1558e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e6c81e","pattern":"[url:value = 'http://5.182.210.174/e6c81e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f44057ae-fb95-d048-09d6-0000a4b6bf33","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/932a2a","pattern":"[url:value = 'http://5.182.210.174/932a2a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f0a30b6-861b-8e87-98ef-00000a3618ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/5VZa","pattern":"[url:value = 'http://129.121.114.124/5VZa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73a7d0e2-9c0d-94cd-56ce-0000979ab247","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/dnCf","pattern":"[url:value = 'http://129.121.114.124/dnCf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44824e15-db99-6fb5-4c9f-000083d7a4f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/16268e","pattern":"[url:value = 'http://5.182.210.174/16268e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4060af4a-1719-abb6-8eaf-0000ed568c86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/dMX","pattern":"[url:value = 'http://129.121.114.124/dMX']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6ca1064-07fc-3ee2-4cc9-00008adb1f5b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/cZg","pattern":"[url:value = 'http://129.121.114.124/cZg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9384aa6a-9638-2040-e7db-00000f0b1891","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/878f49","pattern":"[url:value = 'http://5.182.210.174/878f49']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40bed60f-7362-bc92-dfa3-00000491fec1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.217.218:36543/i","pattern":"[url:value = 'http://42.224.217.218:36543/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a54cefe3-68b5-40ec-a5ec-0000f95ec96a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://157.66.146.183:43544/bin.sh","pattern":"[url:value = 'http://157.66.146.183:43544/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ca72186-7980-14a1-38d3-0000d5e30158","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.111.210.192:51471/i","pattern":"[url:value = 'http://125.111.210.192:51471/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13b12e8f-6195-3173-7a0b-0000a97e9336","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.35.149:47141/bin.sh","pattern":"[url:value = 'http://42.230.35.149:47141/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75d857cf-f1e8-f504-1cef-0000137705d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://gist.githubusercontent.com/nelsoncordeiro24-droid/26e6f76fb48da38d446497b7ac8323d4/raw/fa81f521ba1948a50721a2fa077a0cc68eb55cc8/gistfile1.txt","pattern":"[url:value = 'https://gist.githubusercontent.com/nelsoncordeiro24-droid/26e6f76fb48da38d446497b7ac8323d4/raw/fa81f521ba1948a50721a2fa077a0cc68eb55cc8/gistfile1.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08c1bfca-5d20-2929-b10c-0000e7701661","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.190.224.62:43470/i","pattern":"[url:value = 'http://196.190.224.62:43470/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e86aaf9-6626-12b5-dc4b-00001e507ff9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/bRci","pattern":"[url:value = 'http://129.121.114.124/bRci']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d4894cd-2970-6ad8-2863-0000002bc69c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/485150","pattern":"[url:value = 'http://5.182.210.174/485150']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d881038b-57be-da16-661d-0000a8845162","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7866d1","pattern":"[url:value = 'http://5.182.210.174/7866d1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e194d0f8-a930-8cc9-5aae-000039fbf565","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3020e1","pattern":"[url:value = 'http://5.182.210.174/3020e1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c130dec0-5ff6-3974-b7cb-00005cbb0b12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/50435a","pattern":"[url:value = 'http://5.182.210.174/50435a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27a4e46d-dacf-8313-cfa4-00005fd04ce3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/q0V","pattern":"[url:value = 'http://129.121.114.124/q0V']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--899ef816-072f-c1ce-ed91-0000270f4f13","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/9WH","pattern":"[url:value = 'http://129.121.114.124/9WH']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec4fb203-81b0-fb52-8bb8-0000c6a06b20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/748a90","pattern":"[url:value = 'http://5.182.210.174/748a90']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de754457-906d-2ecc-145f-000029ff72f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/k7M","pattern":"[url:value = 'http://129.121.110.105/k7M']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed64ae95-9e41-40c1-8f96-000075f50b7e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/aeecec","pattern":"[url:value = 'http://5.182.210.174/aeecec']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12a2b23f-5652-bfe5-6ab2-0000356ae9ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/3tp","pattern":"[url:value = 'http://129.121.114.124/3tp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25a2e0bd-749b-fe0a-0c5a-00005f5619e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/seb3","pattern":"[url:value = 'http://129.121.114.124/seb3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab18c10b-0835-6c5d-ddfe-000039aed4bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/NtB","pattern":"[url:value = 'http://129.121.110.105/NtB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b61652ec-6f54-3025-c828-000028d7e65b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2af6fb","pattern":"[url:value = 'http://5.182.210.174/2af6fb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dca2c82-82e6-829a-afa9-00005447ca5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/59a197","pattern":"[url:value = 'http://5.182.210.174/59a197']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--736100c3-a148-35a0-e31d-00005d2a3c0a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/29d455","pattern":"[url:value = 'http://5.182.210.174/29d455']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff3cc772-d8ee-e4d9-26ad-000008d7c461","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d4a3c0","pattern":"[url:value = 'http://5.182.210.174/d4a3c0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--636dedb5-53a5-9d1d-cd10-0000ef30e972","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cdb475","pattern":"[url:value = 'http://5.182.210.174/cdb475']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f71f1b55-2d11-e230-4296-0000ba3f6f6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/07038c","pattern":"[url:value = 'http://5.182.210.174/07038c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fd617f6-4eb0-3024-e4a5-00002f0cb934","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e5da97","pattern":"[url:value = 'http://5.182.210.174/e5da97']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f011649-43a5-a615-3045-0000e0a2762f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/VHo","pattern":"[url:value = 'http://129.121.110.105/VHo']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22add7be-9aed-fc5b-66a2-00005da81a1b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/nf1","pattern":"[url:value = 'http://129.121.110.105/nf1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--066dd189-4d76-18a3-989b-0000b1b28c1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ab4501","pattern":"[url:value = 'http://5.182.210.174/ab4501']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aaa7f06-a4f1-d48c-46ca-00006e5f16c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d687aa","pattern":"[url:value = 'http://5.182.210.174/d687aa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9cd680b-8a1e-92e0-f175-0000b0d2f534","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/ytEr","pattern":"[url:value = 'http://129.121.110.105/ytEr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a508de48-d823-5d6d-73dd-00009b9ff9d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e89cd9","pattern":"[url:value = 'http://5.182.210.174/e89cd9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26b29e87-de78-3377-9f8b-0000daa13db9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a05a88","pattern":"[url:value = 'http://5.182.210.174/a05a88']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd285d4e-7c4e-7d41-a659-0000b4d26e7a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0cda73","pattern":"[url:value = 'http://5.182.210.174/0cda73']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a280c6b-ac71-956b-3249-000029f486c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/8fedf4","pattern":"[url:value = 'http://5.182.210.174/8fedf4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85ab7b19-2095-8848-ee64-00006a4e0789","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6be5c4","pattern":"[url:value = 'http://5.182.210.174/6be5c4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fff615bc-7dcf-3613-fe85-00005b59f318","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/688c63","pattern":"[url:value = 'http://5.182.210.174/688c63']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54ec9164-8ab0-58e6-7fae-00007a4e330e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ff9728","pattern":"[url:value = 'http://5.182.210.174/ff9728']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6f73175-e338-9eb0-2c86-000043c88fae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9b9d62","pattern":"[url:value = 'http://5.182.210.174/9b9d62']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--736c002b-db03-4cf1-abae-0000846ac1af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/4c1687","pattern":"[url:value = 'http://5.182.210.174/4c1687']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ff7ed0f-0800-212d-f822-00003723e892","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.aarch64","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b85512f1-8509-cb97-ffcf-000023858959","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.armv6l","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf6a61a4-d3fb-4e26-ca17-0000fb86620d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.mips","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb78f8d4-87a5-3370-3af4-0000fc4d4a32","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.sh4","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a637073-089c-fe98-14be-00005945da39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.armv4l","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21831b0f-9859-4263-cd85-000022ad1bb2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.sparc","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3465572-1d20-fbc4-c682-0000fb70b4d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.m68k","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a7a3b02-4bbc-b561-b5b2-00007b90e6b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.i486","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed893727-189b-9c04-b890-0000cd178e96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.mipsel","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91f8b146-1c74-0fb4-4978-0000ced9519a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.arc","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b42c1db-b43b-8dc1-9b71-00003f995987","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.powerpc","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93784132-5fb2-1d0d-b0a6-00006425f389","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.armv5l","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0ef2d40-c9d9-d671-1478-000094736da8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.x86_64","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a14e23b0-6768-054d-0162-00001ee5a0e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.armv7l","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--349caca9-46d6-0ee9-96ba-0000d9d40fff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.67.199:54598/bin.sh","pattern":"[url:value = 'http://42.224.67.199:54598/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a37a87be-a96f-174b-3222-0000ffa400b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.spc","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--598188e9-4b3a-610e-6d19-00003ba00f2d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.i468","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.i468']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db6ef709-e9f5-58fb-5574-00000a5045df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/c.sh","pattern":"[url:value = 'http://43.98.174.233/c.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--697a3ad5-90bc-0841-2f8c-0000ea4df447","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://157.66.146.183:43544/i","pattern":"[url:value = 'http://157.66.146.183:43544/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecb53534-8736-8427-8f8d-0000ce2e8dbb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.67.199:54598/i","pattern":"[url:value = 'http://42.224.67.199:54598/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d60ef0a9-41c2-a9dc-579b-0000d1dbef2d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.205.38.0:44205/bin.sh","pattern":"[url:value = 'http://178.205.38.0:44205/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d226c26-57a1-d5af-9706-0000d49e1a3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.141.61.27:55632/i","pattern":"[url:value = 'http://222.141.61.27:55632/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce07e70c-4cfb-ff7c-318d-000072374c8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.220:36372/i","pattern":"[url:value = 'http://210.208.111.220:36372/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a48dbf48-0a4e-2cbb-b698-00007aabd498","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.144.249:44378/i","pattern":"[url:value = 'http://115.56.144.249:44378/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be91106f-ef6b-2c3c-c6bd-00007a37788e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.24.12.180:50663/bin.sh","pattern":"[url:value = 'http://27.24.12.180:50663/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88c69972-cf31-7433-e381-00007187afce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.100:38107/i","pattern":"[url:value = 'http://210.208.111.100:38107/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22de53d8-0bb3-d603-5474-00008711d040","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.205.38.0:44205/i","pattern":"[url:value = 'http://178.205.38.0:44205/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca6bcdd3-b6f3-1c7b-549f-0000df8ddfde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.234.37:36560/bin.sh","pattern":"[url:value = 'http://123.12.234.37:36560/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d18451d-4ff7-2537-6b61-00007eea56d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.127.103.153:37513/i","pattern":"[url:value = 'http://182.127.103.153:37513/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8ba9e73-3c18-e280-cd27-000066b76e69","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.24.12.180:50663/i","pattern":"[url:value = 'http://27.24.12.180:50663/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a5a705e-2e71-615f-e70a-000036d58742","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/arm4","pattern":"[url:value = 'http://94.154.43.26:6677/bins/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de3e993d-eade-84ea-7fc2-0000b9271f4b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/mipsel","pattern":"[url:value = 'http://94.154.43.26:6677/bins/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b070f8e-f83d-f240-26f0-00000621fa03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/m68k","pattern":"[url:value = 'http://94.154.43.26:6677/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--072b3b58-2a0b-e128-f53f-000006d72cd9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/mips","pattern":"[url:value = 'http://94.154.43.26:6677/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42d5e9b4-64f6-ef29-6836-00004f247dde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/ppc","pattern":"[url:value = 'http://94.154.43.26:6677/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4541172-69e0-8609-fbf6-00009cdc4fc9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/arm6","pattern":"[url:value = 'http://94.154.43.26:6677/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d35321e4-9afa-3789-010e-0000246028ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/arm7","pattern":"[url:value = 'http://94.154.43.26:6677/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37870be3-4612-058f-88a0-0000cffae428","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/sh4","pattern":"[url:value = 'http://94.154.43.26:6677/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f67d87a-fbe0-c77d-ebae-0000372713ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/x86","pattern":"[url:value = 'http://94.154.43.26:6677/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bfec5a8-50c5-7b8b-85e2-0000cf95b5ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/x32","pattern":"[url:value = 'http://94.154.43.26:6677/bins/x32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7229429-f38f-362f-958c-000003a736dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.150.18:40732/i","pattern":"[url:value = 'http://123.5.150.18:40732/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dffabbd-1408-1b8e-1ece-00005901a2cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://106.40.240.24:35127/bin.sh","pattern":"[url:value = 'http://106.40.240.24:35127/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14728ddf-ea83-6f8b-0352-00004285c1a1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.26.164:39914/bin.sh","pattern":"[url:value = 'http://110.36.26.164:39914/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16dfb431-c0e7-dd40-68c2-0000471a6ee6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.108/gchLdNMan179.bin","pattern":"[url:value = 'http://185.29.9.108/gchLdNMan179.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a03ddcdd-04e3-0c3d-48af-000004c2256f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.108/Virginalling.asi","pattern":"[url:value = 'http://185.29.9.108/Virginalling.asi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac9a7d27-b1bd-f2cf-a231-0000433f6886","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.228.39.67:45035/bin.sh","pattern":"[url:value = 'http://42.228.39.67:45035/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a1b391b-cb27-ccc2-a487-000060e44d33","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.218.63:33777/bin.sh","pattern":"[url:value = 'http://221.15.218.63:33777/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13a16103-97f7-9d70-8882-00002b07327c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/775af1","pattern":"[url:value = 'http://5.182.210.174/775af1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64663856-a0f3-6065-8341-00002f096f5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1eb5ef","pattern":"[url:value = 'http://5.182.210.174/1eb5ef']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6945bf3f-0348-e643-8e2b-0000beaae002","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e0758e","pattern":"[url:value = 'http://5.182.210.174/e0758e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec1f5dca-5d94-afbf-9ea2-0000ea537838","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f48b45","pattern":"[url:value = 'http://5.182.210.174/f48b45']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44a81037-8765-172a-804c-0000479d8f74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3ee62b","pattern":"[url:value = 'http://5.182.210.174/3ee62b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3974aaf9-d749-f968-3e3f-00004de3ec8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b62738","pattern":"[url:value = 'http://5.182.210.174/b62738']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8336c101-8946-d7cc-1f44-0000e8ef5c8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/12cd43","pattern":"[url:value = 'http://5.182.210.174/12cd43']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4eae43cc-9012-a562-9720-000086f9b8ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ed422a","pattern":"[url:value = 'http://5.182.210.174/ed422a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--478acac3-6625-46bf-8eb4-00005be7380a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0d5aa8","pattern":"[url:value = 'http://5.182.210.174/0d5aa8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bac3960d-7323-af08-caee-0000d9d868d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a34888","pattern":"[url:value = 'http://5.182.210.174/a34888']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd4e8997-b0a0-677e-a816-0000770fa493","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c55677","pattern":"[url:value = 'http://5.182.210.174/c55677']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--013ad69b-f97d-33cf-102a-0000145ea995","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/dc7ecc","pattern":"[url:value = 'http://5.182.210.174/dc7ecc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b5e924d-4a1b-7999-198c-00004390cf6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.103.43:39953/i","pattern":"[url:value = 'http://125.43.103.43:39953/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df257779-d4ac-dab0-2089-0000842c2dd8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.228.39.67:45035/i","pattern":"[url:value = 'http://42.228.39.67:45035/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6932e95f-15d5-5621-97ab-0000d4fd356f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.26.164:39914/i","pattern":"[url:value = 'http://110.36.26.164:39914/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ef8ffa8-9d56-de2a-7faa-0000035fcea4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://sysupdate.online/tools/grab.cmd","pattern":"[url:value = 'https://sysupdate.online/tools/grab.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8050e46e-0d60-74e7-d78f-0000e746c418","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.46.213.70:47197/bin.sh","pattern":"[url:value = 'http://125.46.213.70:47197/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a42c4e0-733f-f23f-8897-00006ad0a762","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.74.53.25:55617/i","pattern":"[url:value = 'http://39.74.53.25:55617/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00743a0f-cf79-4fbe-e5b2-00008deb69cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.93.217:46445/bin.sh","pattern":"[url:value = 'http://110.36.93.217:46445/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f02dba92-2628-9ed7-6230-000051143387","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.236.65.43:35674/i","pattern":"[url:value = 'http://46.236.65.43:35674/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4661af0-a1d4-33a1-889b-0000554e087c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.54.132.26:37475/bin.sh","pattern":"[url:value = 'http://115.54.132.26:37475/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a54eb14-00a3-fa61-933c-00003ed5f1e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.104.156:32771/i","pattern":"[url:value = 'http://210.208.104.156:32771/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ac54a4e-694f-9d25-7536-00006fea74be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.114.184:58866/i","pattern":"[url:value = 'http://182.121.114.184:58866/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c03dcf0-8c2d-a8fa-6066-0000f536edcb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.141.61.27:55632/bin.sh","pattern":"[url:value = 'http://222.141.61.27:55632/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--949df10a-2cb7-2b45-a77d-00007af8ffe9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.43.119:55539/bin.sh","pattern":"[url:value = 'http://110.37.43.119:55539/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29e009b6-3406-d686-fd84-0000446d9e14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.182.123.61:50511/i","pattern":"[url:value = 'http://222.182.123.61:50511/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1afae98-aaff-58ca-6172-0000719b8319","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.123.40.234:41791/i","pattern":"[url:value = 'http://182.123.40.234:41791/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47f6a38b-68ad-2a14-b1b3-0000c8e2098b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.54.43.5:55742/i","pattern":"[url:value = 'http://61.54.43.5:55742/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e8e08f2-c8bd-1d27-1473-000080efc631","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://83.68.249.16:45432/i","pattern":"[url:value = 'http://83.68.249.16:45432/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8663a82e-92f2-f620-15c3-000074c028c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://93.157.253.209:37860/i","pattern":"[url:value = 'http://93.157.253.209:37860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea300153-ef59-6fc8-935a-0000a54ed440","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.231.229.97:60941/bin.sh","pattern":"[url:value = 'http://113.231.229.97:60941/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47f0d05c-e460-0498-27a2-0000ad55a53e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://93.157.253.209:37860/bin.sh","pattern":"[url:value = 'http://93.157.253.209:37860/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88acd1eb-ee7a-4590-c84a-0000168261fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.147.220.91:36766/bin.sh","pattern":"[url:value = 'http://175.147.220.91:36766/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d30774c-1152-fffe-88d4-0000cb51ee9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://1.20.91.236:53593/i","pattern":"[url:value = 'http://1.20.91.236:53593/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69541cbe-bd40-a94d-0470-0000b1c75e6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.190.20.88:42140/bin.sh","pattern":"[url:value = 'http://123.190.20.88:42140/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e9b37da-516c-021c-ded8-000083b21f8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.147.220.91:36766/i","pattern":"[url:value = 'http://175.147.220.91:36766/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08d6fcdd-1ca7-0bfb-28c2-0000a69e3a95","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.1.153:58160/i","pattern":"[url:value = 'http://42.235.1.153:58160/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2036015b-bb49-08d3-ad3a-0000423e2007","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.58.131.62:38469/bin.sh","pattern":"[url:value = 'http://113.58.131.62:38469/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--219480e9-2195-b8c9-8d8e-00009ea461b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.116.107:43623/i","pattern":"[url:value = 'http://210.208.116.107:43623/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5d5a15e-87e0-a145-6b2b-0000d3f1ed52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.115.189.169:34303/i","pattern":"[url:value = 'http://182.115.189.169:34303/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d80719cb-4889-053e-251d-00006ce8006c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.58.42.82:51830/bin.sh","pattern":"[url:value = 'http://59.58.42.82:51830/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--feb191c0-2f6f-0209-670a-0000b1e5eb51","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.116.127:38782/bin.sh","pattern":"[url:value = 'http://110.37.116.127:38782/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e9778a7-f6d7-a523-cb85-0000a1ccfb1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.77.172.60:34449/bin.sh","pattern":"[url:value = 'http://39.77.172.60:34449/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8545b5fe-7892-1c3c-eceb-0000d428f413","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.130.14:38206/i","pattern":"[url:value = 'http://115.55.130.14:38206/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--692ced19-a3d8-0dbc-211c-00003e893c7a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.218.63:33777/i","pattern":"[url:value = 'http://221.15.218.63:33777/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e9d25b5-4937-933e-0c44-000051ae4655","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://37.78.176.5:45921/i","pattern":"[url:value = 'http://37.78.176.5:45921/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9882861d-b60e-6b77-ee99-00008ee7a8d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.144.249:44378/bin.sh","pattern":"[url:value = 'http://115.56.144.249:44378/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40d9e5ed-f895-ea7d-89ea-0000894a6bc4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.33.100:54465/bin.sh","pattern":"[url:value = 'http://61.52.33.100:54465/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69837c9d-eacd-2ad9-8b5c-0000f6868a04","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.160.237:33370/bin.sh","pattern":"[url:value = 'http://115.48.160.237:33370/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fc27d8b-126e-ed59-1de6-0000f6ed15e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.86.136.138:39726/bin.sh","pattern":"[url:value = 'http://42.86.136.138:39726/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d5df945-c428-a3f1-3eba-000052837db5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://183.23.139.207:35951/i","pattern":"[url:value = 'http://183.23.139.207:35951/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5e44d03-3303-dfb7-0d6f-00001480ec1b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://203.101.187.14:60098/i","pattern":"[url:value = 'http://203.101.187.14:60098/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99bdc712-c600-fe21-1fa5-0000dabfbc91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.182.123.61:50511/bin.sh","pattern":"[url:value = 'http://222.182.123.61:50511/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a01fbe81-22fa-038d-c438-0000e3cfba7a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.74:36898/bin.sh","pattern":"[url:value = 'http://210.208.111.74:36898/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37761186-e814-4df4-2d3d-0000fb71d5b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.115.68.225:51187/i","pattern":"[url:value = 'http://182.115.68.225:51187/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb14c5cc-d170-8047-4e7e-0000c094dd07","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.13.254:55917/i","pattern":"[url:value = 'http://42.224.13.254:55917/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84703c3c-464e-07a0-552b-0000faf1511d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.147.159.41:36190/i","pattern":"[url:value = 'http://175.147.159.41:36190/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9be5faa-ca97-ed06-244b-0000316342f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.87/rondo","pattern":"[url:value = 'http://194.26.192.87/rondo']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e303ea91-e439-1e22-f38e-0000353fdd56","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.72.182:55007/i","pattern":"[url:value = 'http://110.36.72.182:55007/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc0b6808-6745-0575-b075-0000c0932cfd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.12.61:55017/i","pattern":"[url:value = 'http://110.36.12.61:55017/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a04ccc66-a86c-a254-72ed-0000a0096765","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://193.31.201.20:45160/bin.sh","pattern":"[url:value = 'http://193.31.201.20:45160/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95e98506-8cc6-c737-263d-00006fd90f5b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.190.20.88:42140/i","pattern":"[url:value = 'http://123.190.20.88:42140/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d188eb6-5f18-6ca1-4fce-000083c9ead2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.74.33.201:59336/bin.sh","pattern":"[url:value = 'http://39.74.33.201:59336/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--349e9a2f-73bc-6967-cdef-00005b7e9894","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.146.211.156:47338/bin.sh","pattern":"[url:value = 'http://175.146.211.156:47338/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d783c061-dbe6-378d-96d5-00000228e1ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.160.237:33370/i","pattern":"[url:value = 'http://115.48.160.237:33370/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47eeb249-7215-1d58-9b34-00001a7cf0e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.80.57.126:54698/i","pattern":"[url:value = 'http://103.80.57.126:54698/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--045b4d76-ea0e-3a90-02eb-00001d64e87c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://106.40.240.24:35127/i","pattern":"[url:value = 'http://106.40.240.24:35127/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37f1a361-2eff-449c-a0a1-0000f2f3c92e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.18.143:41104/bin.sh","pattern":"[url:value = 'http://219.157.18.143:41104/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58ef227b-5cdf-b6df-ebff-00003bd57b8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.137.177.124:50033/bin.sh","pattern":"[url:value = 'http://61.137.177.124:50033/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c553a180-ec75-a010-badd-0000503dd30d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.10.128:38226/bin.sh","pattern":"[url:value = 'http://219.157.10.128:38226/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee7ffb4a-eb80-8a98-0363-0000be89198d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.192.179:36837/i","pattern":"[url:value = 'http://221.15.192.179:36837/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2429cd0-1c1a-81bf-3a14-00003cd99586","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.74.33.201:59336/i","pattern":"[url:value = 'http://39.74.33.201:59336/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b4594ad-17e5-15cd-570d-0000364d71c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.42:48403/i","pattern":"[url:value = 'http://210.208.110.42:48403/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db6491e5-26a1-6793-5924-000079da4924","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.200.107.56:39903/i","pattern":"[url:value = 'http://221.200.107.56:39903/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8810cdd-952f-ebc0-fca9-0000472d1faf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.52.204.44:32770/bin.sh","pattern":"[url:value = 'http://42.52.204.44:32770/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d49d3e4-a4ab-c09c-b8fa-0000ff885207","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.31.205:38686/i","pattern":"[url:value = 'http://110.36.31.205:38686/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc33416e-b335-8565-8a33-0000e08dbc2a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.91.77:35029/bin.sh","pattern":"[url:value = 'http://42.235.91.77:35029/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13cd08df-5908-53d0-13c6-00005faf03b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.74:36898/i","pattern":"[url:value = 'http://210.208.111.74:36898/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6182e645-a38c-e8e0-6dd8-000089b5bc82","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.62.148.107:57509/bin.sh","pattern":"[url:value = 'http://115.62.148.107:57509/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--580935a4-9fef-46ae-2095-0000f1eaca58","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.41.77:37933/i","pattern":"[url:value = 'http://182.113.41.77:37933/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86cb9fd9-b219-b845-aacd-00008c41c67a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.106.148:49825/bin.sh","pattern":"[url:value = 'http://110.37.106.148:49825/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--978e9897-43e5-7e25-a603-0000bfb24579","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.137.177.124:50033/i","pattern":"[url:value = 'http://61.137.177.124:50033/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a27b5b8e-e753-9a20-ee2f-000081455fad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.33.100:54465/i","pattern":"[url:value = 'http://61.52.33.100:54465/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1475601-386a-7e17-55c1-0000f1ed0189","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.156.140:46601/bin.sh","pattern":"[url:value = 'http://61.52.156.140:46601/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de46ae2f-84ab-276e-bd44-0000685c316f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.170.224.217:57287/bin.sh","pattern":"[url:value = 'http://45.170.224.217:57287/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--721b939c-d23b-f85a-6144-0000d076147d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://122.139.13.204:51081/bin.sh","pattern":"[url:value = 'http://122.139.13.204:51081/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34777fd3-a005-27f3-f2be-00001d7f4f55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.145.118:58396/i","pattern":"[url:value = 'http://115.63.145.118:58396/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d39de9d-160d-8600-d1e5-000041030eb9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://122.139.13.204:51081/i","pattern":"[url:value = 'http://122.139.13.204:51081/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7582d8cd-b7e9-a8c4-326d-00002756edd3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.55.212.26:51890/bin.sh","pattern":"[url:value = 'http://42.55.212.26:51890/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05ed084b-64b3-2dab-1234-00009edb3347","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://193.31.201.20:45160/i","pattern":"[url:value = 'http://193.31.201.20:45160/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c213d50e-d05e-4ffe-5765-0000861918e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.196.6:60240/i","pattern":"[url:value = 'http://125.44.196.6:60240/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c12dc49d-e25a-1968-4b6b-0000ebf420f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.126.91:33505/bin.sh","pattern":"[url:value = 'http://42.224.126.91:33505/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df806548-cad1-f073-8405-00007fcd85cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.196.6:60240/bin.sh","pattern":"[url:value = 'http://125.44.196.6:60240/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1390fcab-ba03-7177-26ad-0000695dcac9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.126.91:33505/i","pattern":"[url:value = 'http://42.224.126.91:33505/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--649414ae-f18f-7a75-5555-0000fe5cb5a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.138.119.216:49346/bin.sh","pattern":"[url:value = 'http://222.138.119.216:49346/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05c62c79-642a-8d5e-ff63-0000e4601a5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.180.15.83:57232/i","pattern":"[url:value = 'http://42.180.15.83:57232/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80eefb79-04cb-9694-cc1f-00001face1f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.115.68.225:51187/bin.sh","pattern":"[url:value = 'http://182.115.68.225:51187/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae3be3f9-e42d-99d9-fa6a-00008a3b4454","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.86.136.138:39726/i","pattern":"[url:value = 'http://42.86.136.138:39726/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--549c3bf9-81b4-3253-e865-00008b683df2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.170.224.217:57287/i","pattern":"[url:value = 'http://45.170.224.217:57287/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9977154-0d48-9199-bb98-0000c78c8d3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://216.249.4.20:36657/bin.sh","pattern":"[url:value = 'http://216.249.4.20:36657/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33e4c013-3cd3-378d-f630-0000868ba99b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://120.28.135.245:34017/bin.sh","pattern":"[url:value = 'http://120.28.135.245:34017/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b60989e-a39c-a7c0-8da4-0000f7d1b135","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.184.163.17:41849/i","pattern":"[url:value = 'http://60.184.163.17:41849/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f89d0c71-80cc-f65b-1fac-0000834ee7c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.186.64.242:41071/bin.sh","pattern":"[url:value = 'http://105.186.64.242:41071/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecf3bd79-88b1-29e2-703c-0000da8965ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.192.237:54399/i","pattern":"[url:value = 'http://182.114.192.237:54399/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bef35c14-7f42-f4f3-6512-0000dde3ff42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.184.163.17:41849/bin.sh","pattern":"[url:value = 'http://60.184.163.17:41849/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26a281f6-6a62-3e51-7c13-00005f7f2124","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.51:46526/i","pattern":"[url:value = 'http://210.208.110.51:46526/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e51c68bd-e9fd-4d93-3dea-000080d595e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.226.103:50631/i","pattern":"[url:value = 'http://42.230.226.103:50631/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06568758-bf01-2398-d044-00006013c0ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.104.156:32771/bin.sh","pattern":"[url:value = 'http://210.208.104.156:32771/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17a2ef96-6ce7-c543-97b2-0000ecd6ac1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://183.23.139.207:35951/bin.sh","pattern":"[url:value = 'http://183.23.139.207:35951/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17871253-09f0-ac3f-21ed-000091a4b300","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.13.254:55917/bin.sh","pattern":"[url:value = 'http://42.224.13.254:55917/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bac73f69-1ef0-26d2-62c6-0000eeaec894","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.58.131.62:38469/i","pattern":"[url:value = 'http://113.58.131.62:38469/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--288e2c3d-970b-2ba3-a540-0000ebf4f6cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.116.107:43623/bin.sh","pattern":"[url:value = 'http://210.208.116.107:43623/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99550c01-967c-2ea4-e707-00004200c577","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.228.149.193:49576/bin.sh","pattern":"[url:value = 'http://113.228.149.193:49576/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ad34f8d-cc6f-6b70-873b-000075a01df3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.91.77:35029/i","pattern":"[url:value = 'http://42.235.91.77:35029/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--312f28a7-9866-3bb1-4388-0000decd9d89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.94.120:47055/i","pattern":"[url:value = 'http://123.14.94.120:47055/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e50647c-d5b0-1a40-b5bc-0000c3672b93","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.181.9:49913/i","pattern":"[url:value = 'http://27.215.181.9:49913/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--188f594a-e9e5-5c00-55e8-00009f05350c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.234.185.8:38535/i","pattern":"[url:value = 'http://42.234.185.8:38535/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82efb59f-727e-09f5-f587-0000ab3e1ff5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.148.29.181:47643/bin.sh","pattern":"[url:value = 'http://175.148.29.181:47643/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac0dc3d6-efde-0e8a-647d-0000e314f4b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.116.127:38782/i","pattern":"[url:value = 'http://110.37.116.127:38782/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bbd3b8c-846d-44e1-00b2-0000953b8778","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.146.211.156:47338/i","pattern":"[url:value = 'http://175.146.211.156:47338/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9182c76-68b0-fe60-abac-00008e57a26d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.157.254:58146/bin.sh","pattern":"[url:value = 'http://115.58.157.254:58146/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3e908fc-02a3-f577-8ba5-000059a71f7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.180.11.230:34276/bin.sh","pattern":"[url:value = 'http://42.180.11.230:34276/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--684aa226-b91f-720d-9963-0000c28e0971","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.80.57.126:54698/bin.sh","pattern":"[url:value = 'http://103.80.57.126:54698/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea4be416-7720-322f-42e1-000037c13476","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.213.21:46712/i","pattern":"[url:value = 'http://120.84.213.21:46712/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24fc0f70-a7df-edac-d96f-000093148f22","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.238.174.81:41413/i","pattern":"[url:value = 'http://42.238.174.81:41413/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b883b71-522f-6ef2-6a61-00007e94a378","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://96.245.232.132:44492/i","pattern":"[url:value = 'http://96.245.232.132:44492/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a769e76-c8d7-a31c-c49e-0000f2ae22ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.23.55.232:7702/linux","pattern":"[url:value = 'http://119.23.55.232:7702/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12ac1fde-997d-1083-5613-0000615bbcdb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.84.190.146:9593/linux","pattern":"[url:value = 'http://47.84.190.146:9593/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1524a54-6121-b5f5-667f-000010305434","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.137.204.59:51581/i","pattern":"[url:value = 'http://61.137.204.59:51581/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d08a8e1d-3903-8a55-7a65-000048e5aaa6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.41.97:51870/bin.sh","pattern":"[url:value = 'http://42.230.41.97:51870/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77889c43-62e9-f120-b3d2-0000b83db844","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.137.204.59:51581/bin.sh","pattern":"[url:value = 'http://61.137.204.59:51581/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2896e2ae-13a7-b396-cfd3-000052b492f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.190.224.62:43470/bin.sh","pattern":"[url:value = 'http://196.190.224.62:43470/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccf37e19-5378-7210-d28e-000072892a43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.209.147:55609/bin.sh","pattern":"[url:value = 'http://130.12.209.147:55609/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e84df23a-887d-ff80-4aa3-0000f36d9b12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.134.41.212:48460/bin.sh","pattern":"[url:value = 'http://123.134.41.212:48460/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9952c34-103b-d008-9497-00006e40046e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/mpsl","pattern":"[url:value = 'http://94.154.43.23/LjEZs/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd1860c5-1108-ee88-83de-00001583e229","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/x86","pattern":"[url:value = 'http://94.154.43.23/LjEZs/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2ecef52-26a4-3144-6380-0000eb14fef2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/spc","pattern":"[url:value = 'http://94.154.43.23/LjEZs/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c47eafd-352d-914f-5eb8-000005436a24","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/mips","pattern":"[url:value = 'http://94.154.43.23/LjEZs/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0aa510b-038a-ba57-ba3b-00006d808c5c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/ppc","pattern":"[url:value = 'http://94.154.43.23/LjEZs/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1fc72d8-4ffd-92b8-f9e0-0000deee84b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/x86_64","pattern":"[url:value = 'http://94.154.43.23/LjEZs/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--883ff041-b2a9-fdfb-4215-000027f46e51","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/arm7","pattern":"[url:value = 'http://94.154.43.23/LjEZs/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef730e72-2e36-835f-b1fd-0000f48cf477","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/0x83911d24Fx.sh","pattern":"[url:value = 'http://94.154.43.23/0x83911d24Fx.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6631916d-a55a-c094-62eb-00008dfda6da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/arm5","pattern":"[url:value = 'http://94.154.43.23/LjEZs/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38c0d7c9-4a41-0506-6119-00003f157931","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/arm","pattern":"[url:value = 'http://94.154.43.23/LjEZs/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be22031b-e2da-900b-7604-00001a481ba6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/bins.sh","pattern":"[url:value = 'http://94.154.43.23/bins.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85f8b35c-f092-fe0f-9360-0000ed5e15aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/sh4","pattern":"[url:value = 'http://94.154.43.23/LjEZs/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df78face-0ca7-384f-da4a-0000dfca0e02","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/arc","pattern":"[url:value = 'http://94.154.43.23/LjEZs/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--106bde2b-7ea4-bde6-7573-000005b5bcfe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/m68k","pattern":"[url:value = 'http://94.154.43.23/LjEZs/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43726967-21c6-5ee6-e726-0000b3da58b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/x86","pattern":"[url:value = 'http://94.154.43.46/LjEZs/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b079588c-f31c-5897-816a-000047e2b93e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/arm7","pattern":"[url:value = 'http://94.154.43.46/LjEZs/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff38c0d7-1120-4750-cfb5-00009f480934","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/arm6","pattern":"[url:value = 'http://94.154.43.23/LjEZs/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64014230-4d50-8861-2773-00006555bd4b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/mips","pattern":"[url:value = 'http://94.154.43.46/LjEZs/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ec058a9-2425-56b0-8558-0000cbd936c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/ppc","pattern":"[url:value = 'http://94.154.43.46/LjEZs/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--282d76e6-9603-7a02-333a-000065a36b91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/m68k","pattern":"[url:value = 'http://94.154.43.46/LjEZs/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4112f36c-2315-359e-2e73-00007993b49d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/arc","pattern":"[url:value = 'http://94.154.43.46/LjEZs/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c86e6f0-853c-c675-a6d9-00004d4d446d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/spc","pattern":"[url:value = 'http://94.154.43.46/LjEZs/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1d384f9-a666-1c3d-8664-00000e56d301","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/mpsl","pattern":"[url:value = 'http://94.154.43.46/LjEZs/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15a15e7b-8754-7b8a-92f6-0000293b21ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/0x83911d24Fx.sh","pattern":"[url:value = 'http://94.154.43.46/0x83911d24Fx.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9ab3613-ff6f-d452-944c-0000220eb36b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins.sh","pattern":"[url:value = 'http://94.154.43.46/bins.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6aade6b-1140-f076-c348-0000994cc3ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/arm","pattern":"[url:value = 'http://94.154.43.46/LjEZs/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77a5c847-e4df-c028-30a0-0000243cd4bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/x86_64","pattern":"[url:value = 'http://94.154.43.46/LjEZs/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b92bafe-e794-6318-796c-00004b07af35","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/sh4","pattern":"[url:value = 'http://94.154.43.46/LjEZs/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c77e681a-c793-f67d-e6e9-0000ff5ede5b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/arm6","pattern":"[url:value = 'http://94.154.43.46/LjEZs/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--448c5f1f-dd82-5574-8108-00003a212f37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://91.92.243.232/bin/support.client.exe","pattern":"[url:value = 'https://91.92.243.232/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5589621b-688a-fcc6-1d3d-000027aa3bcb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://91.92.243.232/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://91.92.243.232/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e7739a0-6d1c-b3e2-330a-0000edeb71b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/arm5","pattern":"[url:value = 'http://94.154.43.46/LjEZs/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5c19e80-9d6d-475a-66c6-000016e20b49","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.164/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://194.26.192.164/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a076e107-c05f-067e-eeaf-00000f3a452f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.164/bin/support.client.exe","pattern":"[url:value = 'http://194.26.192.164/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acd68fa8-9caf-de1c-d4f1-0000f0b6babf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.134.41.212:48460/i","pattern":"[url:value = 'http://123.134.41.212:48460/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8055ff7-6f0a-f32a-e7bf-000009b49527","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.192.237:54399/bin.sh","pattern":"[url:value = 'http://182.114.192.237:54399/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c63b1ad-e769-f117-0f41-00000cb324ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://58.22.18.152:33899/bin.sh","pattern":"[url:value = 'http://58.22.18.152:33899/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf616b57-9cef-fef1-dc1c-000021399e86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.179.35:36195/bin.sh","pattern":"[url:value = 'http://115.55.179.35:36195/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7a12955-7be4-3fee-9efb-00007b96a597","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.236.46.199:42682/bin.sh","pattern":"[url:value = 'http://109.236.46.199:42682/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--826f9bd3-2845-3378-d41b-00003401e15d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.242.225:33235/i","pattern":"[url:value = 'http://115.63.242.225:33235/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7276eaf-a68b-02c7-b647-00007826ac66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://58.22.18.152:33899/i","pattern":"[url:value = 'http://58.22.18.152:33899/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ee5ddd0-543a-f006-020e-00009d09dd55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://121.231.139.26:36392/i","pattern":"[url:value = 'http://121.231.139.26:36392/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f32bbc1-313f-45f6-712a-0000abfd9f15","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.236.46.199:42682/i","pattern":"[url:value = 'http://109.236.46.199:42682/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfbaa57b-9ac7-0f4f-5926-00005416d0fe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_e8219df7a9a21088.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_e8219df7a9a21088.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8d7f673-fb86-0056-297d-0000f8909213","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://37.78.176.5:45921/bin.sh","pattern":"[url:value = 'http://37.78.176.5:45921/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9beb39e-a264-57c0-1226-0000e0cab30d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/dlink.sh","pattern":"[url:value = 'http://95.155.151.113/dlink.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d951a704-538a-e9f9-b39b-00000e55a6e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://chrome-windows.ru/ChromeSetupWindows.exe","pattern":"[url:value = 'https://chrome-windows.ru/ChromeSetupWindows.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d81d2e60-42df-3c61-edce-0000d4a0eba3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.42.193.111:43262/i","pattern":"[url:value = 'http://125.42.193.111:43262/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86410f7d-6bd7-1ef6-71f1-00002e1cd3e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/arc","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da0e2b82-723a-60fc-c3b9-0000870f5af4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/arm7","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--425a05e8-ae62-bf2d-905a-0000a54e885b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/m68k","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcc146ef-3a24-5ba9-62ba-00001c88c84a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/sh4","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bba4f7f7-57be-9c1a-bbfa-0000cebb30cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/mpsl","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a993a4b8-3251-9d1a-67bb-00009c5651bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/ppc","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e76313e-50d6-e8e0-c4f0-0000a5b85e81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/mips","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7b08591-ab8f-27f9-4f78-00008532483c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.37.100.78:38525/i","pattern":"[url:value = 'http://27.37.100.78:38525/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1db71290-2212-ef18-f03c-00002494abbf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/0x83911d24Fx.sh","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/0x83911d24Fx.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd51ae1-0be2-e288-f210-00001ac22312","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/spc","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--134f9300-bb77-0c9e-54dd-00004879c065","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/bins.sh","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/bins.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad091b14-42a9-6204-6670-00003fb33d91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/arm6","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec624e29-b9b1-7eca-af5f-00000eac5ad2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.10.7:34859/i","pattern":"[url:value = 'http://123.11.10.7:34859/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7577f479-a416-cfa1-6b88-000011e7d622","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.137.87:60618/i","pattern":"[url:value = 'http://120.28.137.87:60618/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34004aae-3d73-1d99-98f5-00002d06927f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/arm5","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84219576-e529-26f0-c1fe-0000e4553fc9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/x86","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--202aaf38-e4bd-f33c-9056-00002c2a9856","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/x86_64","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61f9227a-5278-e64b-2cd2-0000cec3a4d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/arm","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4aac669-449e-90f7-a35a-000018d38f8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.231.88.100:39090/i","pattern":"[url:value = 'http://42.231.88.100:39090/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05d42d8b-4ce4-e1a7-9cca-0000b882fde8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.231.88.100:39090/bin.sh","pattern":"[url:value = 'http://42.231.88.100:39090/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af0032bc-1b3b-c63f-2483-0000d5421604","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.79.249.142:34161/bin.sh","pattern":"[url:value = 'http://39.79.249.142:34161/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7045a9cc-12b3-1d55-7dc0-000015b09845","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.22.249:50192/i","pattern":"[url:value = 'http://110.36.22.249:50192/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58928aa3-da88-c317-df0d-0000f0252466","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.79.249.142:34161/i","pattern":"[url:value = 'http://39.79.249.142:34161/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d1bf303-46a0-9c25-cd7e-000043c48078","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.4.125:52901/i","pattern":"[url:value = 'http://110.36.4.125:52901/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3506b50e-f424-aa3d-025a-00008e399759","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.60.75.209:41221/bin.sh","pattern":"[url:value = 'http://78.60.75.209:41221/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--439e9af9-1dc8-24c1-ecaa-0000d27ad161","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.45.111:33017/i","pattern":"[url:value = 'http://123.8.45.111:33017/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d9680b7-13e4-f3aa-8fd8-00001688032c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.45.111:33017/bin.sh","pattern":"[url:value = 'http://123.8.45.111:33017/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b0e0e7c-ffde-6c75-83a4-0000d0a6d408","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.233.197:57647/i","pattern":"[url:value = 'http://110.39.233.197:57647/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0fc5342-e0d2-b897-1ade-0000a2f5ac10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.60.75.209:41221/i","pattern":"[url:value = 'http://78.60.75.209:41221/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a41e8df-a19d-2686-778c-0000e5df3fcb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.143.204:58754/i","pattern":"[url:value = 'http://182.121.143.204:58754/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bb6d4e7-4b18-a2d9-b8c1-00009f8d9542","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.236.65.43:35674/bin.sh","pattern":"[url:value = 'http://46.236.65.43:35674/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f4ec50a-a18c-80ed-5524-0000de088feb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/dvr.sh","pattern":"[url:value = 'http://130.12.182.77/dvr.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29f3984d-0392-2ce3-8e84-00001118f8a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/tvt.sh","pattern":"[url:value = 'http://130.12.182.77/tvt.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--330d8dba-ca36-3f41-6960-0000cc23a4e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://121.234.156.10:48875/i","pattern":"[url:value = 'http://121.234.156.10:48875/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--becee502-d490-64ae-8e43-0000a8277960","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://sysupdate.online:443/agent.ashx","pattern":"[url:value = 'http://sysupdate.online:443/agent.ashx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c30052ae-d69b-a335-fb16-0000af1d0ad1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://rcf.co.mz/Godabeg1.exe","pattern":"[url:value = 'https://rcf.co.mz/Godabeg1.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e29b1dd-a7bc-3324-240f-0000ce4be426","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://172.245.195.245/35/wegivenebstthingswithbetterplaces.hta","pattern":"[url:value = 'http://172.245.195.245/35/wegivenebstthingswithbetterplaces.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5740982-f6cb-522f-fb96-0000906d8499","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://172.245.195.245/35/img_190431.png","pattern":"[url:value = 'http://172.245.195.245/35/img_190431.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c169dd9e-eaa6-a1e2-02bd-00000303b23b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://plain-wnam-prod-public.komododecks.com/202608/09/xQah941ojbxnpRQKa4zi/image.png","pattern":"[url:value = 'https://plain-wnam-prod-public.komododecks.com/202608/09/xQah941ojbxnpRQKa4zi/image.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cecf4eb6-2b96-6c82-7d2d-000050847a68","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.175.88.87/23/wegivenebestthignswithbetterplaces.hta","pattern":"[url:value = 'http://107.175.88.87/23/wegivenebestthignswithbetterplaces.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cb28d7c-c1d1-0222-c51f-000002dfe000","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.175.88.87/23/img_185335.png","pattern":"[url:value = 'http://107.175.88.87/23/img_185335.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9067d2e-6834-fab6-695e-0000b5578c03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.37.79:56846/bin.sh","pattern":"[url:value = 'http://182.113.37.79:56846/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21309cd3-5e61-f889-94eb-000080943b5c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.219.74.117:52755/i","pattern":"[url:value = 'http://222.219.74.117:52755/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b71263cc-c349-27c3-2756-0000d1aa6311","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.193.35.180:45367/bin.sh","pattern":"[url:value = 'http://27.193.35.180:45367/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe9bb525-f316-6e77-4b76-0000349fd16a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.203.98:49336/i","pattern":"[url:value = 'http://182.113.203.98:49336/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c7578f3-f313-aa4c-91c9-0000847dfe66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.37.79:56846/i","pattern":"[url:value = 'http://182.113.37.79:56846/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cc046e0-7503-4724-3b79-000060d3bf11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.97.97:57347/i","pattern":"[url:value = 'http://123.9.97.97:57347/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d91f8f8-c159-d41d-73e3-000014ccafac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.167.183.194:52110/bin.sh","pattern":"[url:value = 'http://175.167.183.194:52110/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2daee4f-d347-8e84-4e8e-0000294b6a39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/blink.sh","pattern":"[url:value = 'http://130.12.182.77/blink.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9468b101-a673-6eeb-36c8-00004b03599e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.5.94.63:4370/i","pattern":"[url:value = 'http://36.5.94.63:4370/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a9eeb1a-7436-2c97-63db-00004ffaf706","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.1.153:58160/bin.sh","pattern":"[url:value = 'http://42.235.1.153:58160/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3785f4b-6506-6bea-cc44-0000eb449ff9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.179.141:33618/bin.sh","pattern":"[url:value = 'http://61.52.179.141:33618/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a8735c9-0f2f-3ced-6332-0000bbe53c6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/177395","pattern":"[url:value = 'http://5.182.210.174/177395']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fa6f492-c7fa-e07e-8dae-000045840bdb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c60df5","pattern":"[url:value = 'http://5.182.210.174/c60df5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--722c0ddf-cc2d-d238-8ee6-0000f5d5257f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/340ab3","pattern":"[url:value = 'http://5.182.210.174/340ab3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01eb81e5-c544-4a46-113d-00004e1fc51e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/410ae5","pattern":"[url:value = 'http://5.182.210.174/410ae5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--343b63eb-4ea1-094e-6b51-0000ae1aab9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/56db7c","pattern":"[url:value = 'http://5.182.210.174/56db7c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3814db65-6dca-0260-329d-0000c27c84f4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/78acf3","pattern":"[url:value = 'http://5.182.210.174/78acf3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09bc4fef-6ab7-e14a-b28a-0000e3fe7e57","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a0d95b","pattern":"[url:value = 'http://5.182.210.174/a0d95b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--950504a9-bf78-fd6b-6a38-000036d9125f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/923a9e","pattern":"[url:value = 'http://5.182.210.174/923a9e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aba43ef4-3630-b8a0-0011-0000d6c5e285","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/16f2c2","pattern":"[url:value = 'http://5.182.210.174/16f2c2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36b0e4c0-1424-40c0-83c3-000094aa56bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e34be1","pattern":"[url:value = 'http://5.182.210.174/e34be1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef9d52f5-10c0-568b-61b0-0000414a2455","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/18c0e1","pattern":"[url:value = 'http://5.182.210.174/18c0e1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77524903-31df-60ad-a3d1-000052ee3f14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/033fd6","pattern":"[url:value = 'http://5.182.210.174/033fd6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a122362-b553-cb86-4a78-0000f2355cb3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.167.183.194:52110/i","pattern":"[url:value = 'http://175.167.183.194:52110/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1259bc0-15a9-48d1-5840-0000bc6854b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.69.240:41361/i","pattern":"[url:value = 'http://110.37.69.240:41361/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2d9770a-c3ab-9cd1-4154-0000669045fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.109.139.73/hdGFtyu.png","pattern":"[url:value = 'http://192.109.139.73/hdGFtyu.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96b76c29-8f73-ae2c-5e1a-00005fa73ad3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.109.139.73/xsvvfgrj.png","pattern":"[url:value = 'http://192.109.139.73/xsvvfgrj.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26ed2aca-6f08-ba2e-40fe-0000d99e04f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.109.139.73/jackin.png","pattern":"[url:value = 'http://192.109.139.73/jackin.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90d642ee-4c0e-f220-caed-0000faf5e2f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.64.77:52921/bin.sh","pattern":"[url:value = 'http://115.49.64.77:52921/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91863854-396f-9a17-430e-00008c8759bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.179.141:33618/i","pattern":"[url:value = 'http://61.52.179.141:33618/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--893b029e-031d-0c59-dd74-000080c65b7b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.64.77:52921/i","pattern":"[url:value = 'http://115.49.64.77:52921/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ae21a26-19f2-3e56-ae24-0000369f0639","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.192.179:36837/bin.sh","pattern":"[url:value = 'http://221.15.192.179:36837/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9011edb3-cefd-57ec-5a0a-0000b20ea824","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.239.96.147:46916/i","pattern":"[url:value = 'http://113.239.96.147:46916/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e68bbfcb-0d2f-91e6-7dfb-000070bbd436","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.229.251:51013/i","pattern":"[url:value = 'http://182.119.229.251:51013/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce62bf99-f87d-70cf-0d89-0000c655741c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.203.98:49336/bin.sh","pattern":"[url:value = 'http://182.113.203.98:49336/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--deb50c70-9cdf-fb56-89ec-0000b739252f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.98.44:53110/bin.sh","pattern":"[url:value = 'http://115.50.98.44:53110/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f153954-8425-abb8-ed9c-0000fc9aaacc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.26.69:40361/bin.sh","pattern":"[url:value = 'http://110.37.26.69:40361/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c14dd45-47d5-e2d9-8f76-0000ac6b6596","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_d16ae09e5eae4115.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_d16ae09e5eae4115.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04152430-6f1c-1b13-b732-00004c28a577","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.156.113.164:60386/i","pattern":"[url:value = 'http://219.156.113.164:60386/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c06eab4a-a379-a970-fb51-00006e826405","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/disconnectraw.arm4","pattern":"[url:value = 'https://94.154.43.60/disconnectraw.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e752061-dec6-7981-05e1-000008884596","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/disconnectraw.x86","pattern":"[url:value = 'https://94.154.43.60/disconnectraw.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5473021-d2aa-41a0-273e-0000fa078b1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/k.sh","pattern":"[url:value = 'https://94.154.43.60/k.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--baf1409c-f0eb-ae94-7d3e-00003abc890f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/disconnectraw.aarch64","pattern":"[url:value = 'https://94.154.43.60/disconnectraw.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--895da45d-cb42-28d9-0a2f-00004fa3ac60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/mipsel","pattern":"[url:value = 'https://94.154.43.60/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19c02591-fd61-9d16-495f-00007b308527","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/arm4","pattern":"[url:value = 'https://94.154.43.60/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d1fe04c-9fd2-d8fd-0734-00005e80cf9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/disconnectraw.mips","pattern":"[url:value = 'https://94.154.43.60/disconnectraw.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a43bbe3a-619c-54a4-7086-000016c74f5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/x86_64","pattern":"[url:value = 'https://94.154.43.60/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccf7d567-00be-d74b-6aae-00006678ce22","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/disconnectraw.x86_64","pattern":"[url:value = 'https://94.154.43.60/disconnectraw.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5967faf0-b227-ab32-5d1d-00007c37cbeb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/disconnectraw.arm7","pattern":"[url:value = 'https://94.154.43.60/disconnectraw.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80c9742b-ed0c-3fd5-1813-000069852ac9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/arm7","pattern":"[url:value = 'https://94.154.43.60/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54b16e97-64c9-8e4a-30fa-00004b322ebc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/mips","pattern":"[url:value = 'https://94.154.43.60/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e191cf00-e3dc-e193-ef4b-00003f1c2d1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/disconnectraw.mipsel","pattern":"[url:value = 'https://94.154.43.60/disconnectraw.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46a12788-043e-d9bb-abe2-000060442ecb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/x86","pattern":"[url:value = 'https://94.154.43.60/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1390ca6-365c-d063-0c2b-0000da33a3d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/killbotx.x86_64","pattern":"[url:value = 'https://94.154.43.60/killbotx.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af43a1be-6273-f049-1c10-0000637f0b99","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/aarch64","pattern":"[url:value = 'https://94.154.43.60/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a21417a4-9c15-3278-c6a1-0000355ee05b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.247.84.112:59435/bin.sh","pattern":"[url:value = 'http://112.247.84.112:59435/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--859d6ccd-d615-4bea-693a-00002af78b6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/aarch64","pattern":"[url:value = 'https://quietsurfwi.help/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c979ab7-357a-5b6f-747b-0000d1a2c930","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/x86","pattern":"[url:value = 'https://quietsurfwi.help/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0795af26-2484-6781-7697-0000614cb816","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/disconnectraw.arm7","pattern":"[url:value = 'https://quietsurfwi.help/disconnectraw.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15dd59c1-5db3-ebaa-a079-0000f700f1b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/x86_64","pattern":"[url:value = 'https://quietsurfwi.help/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e9cfe9c-5f16-7b25-42c4-000073f917f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/disconnectraw.arm4","pattern":"[url:value = 'https://quietsurfwi.help/disconnectraw.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00944c77-8a38-1e50-daea-00000e666c2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/disconnectraw.x86_64","pattern":"[url:value = 'https://quietsurfwi.help/disconnectraw.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af9c3e11-e9d9-72f3-9ebf-000051ee4854","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/arm4","pattern":"[url:value = 'https://quietsurfwi.help/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38bb43a6-03db-7fbf-a227-0000ae641286","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/mipsel","pattern":"[url:value = 'https://quietsurfwi.help/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d692e64-e7e7-8834-7391-000084c1f60f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/killbotx.x86_64","pattern":"[url:value = 'https://quietsurfwi.help/killbotx.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a78a3361-fb2a-4ef2-f119-00004465eb10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/disconnectraw.aarch64","pattern":"[url:value = 'https://quietsurfwi.help/disconnectraw.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12d9f819-7b13-55eb-3cdf-0000c4ebdc86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/disconnectraw.x86","pattern":"[url:value = 'https://quietsurfwi.help/disconnectraw.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82ec03ce-c7b2-bc11-2222-0000edd603f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.109.219.147:35136/bin.sh","pattern":"[url:value = 'http://112.109.219.147:35136/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8ad4b3d-79cb-7ed0-fe72-0000632f7a4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.arm","pattern":"[url:value = 'http://176.65.139.232/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3e17bb6-9c2c-50ec-f29f-00002e63b53c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/disconnectraw.arm7","pattern":"[url:value = 'https://iloveboats.st/disconnectraw.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--893219cb-9a7b-21aa-ead4-00003a5bc41e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/disconnectraw.arm7","pattern":"[url:value = 'https://mail.quietsurfwi.help/disconnectraw.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04f52667-1571-3a90-f440-0000b7e71db8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/x86","pattern":"[url:value = 'https://mail.quietsurfwi.help/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5770013a-07e9-28ac-92f9-0000949465c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/mipsel","pattern":"[url:value = 'https://iloveboats.st/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66bb0ddd-6f1a-cc6c-aa87-0000983af7e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/mips","pattern":"[url:value = 'https://iloveboats.st/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8a53e4b-4f99-1f14-3ce8-00006fc06b7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/disconnectraw.aarch64","pattern":"[url:value = 'https://iloveboats.st/disconnectraw.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd0d2eb3-4feb-0dd7-fa14-000046d870ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/disconnectraw.mipsel","pattern":"[url:value = 'https://iloveboats.st/disconnectraw.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2c31761-87fc-c889-e411-0000ba8df397","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/arm7","pattern":"[url:value = 'https://iloveboats.st/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6446c57f-b189-9a89-6383-000082e9ad09","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/mips","pattern":"[url:value = 'https://mail.quietsurfwi.help/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36956fab-9365-00ee-7256-0000435be7ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/arm7","pattern":"[url:value = 'https://quietsurfwi.help/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e31d569b-c689-806b-3d0b-00008ad78457","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://136.60.32.162:36863/i","pattern":"[url:value = 'http://136.60.32.162:36863/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d4a0377-5742-d95e-e6a8-000018ecc06b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/disconnectraw.mips","pattern":"[url:value = 'https://mail.quietsurfwi.help/disconnectraw.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29378e79-2904-3651-272a-0000b2eb0692","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/arm4","pattern":"[url:value = 'https://mail.quietsurfwi.help/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b03edfc3-c1da-c453-c02b-0000a05ea97c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/arm7","pattern":"[url:value = 'https://mail.quietsurfwi.help/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94ae8ea4-f871-43ae-89b6-0000be698bac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/x86","pattern":"[url:value = 'https://iloveboats.st/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0a06bc0-c6ca-bf43-60c1-00003506c2ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.mipsel","pattern":"[url:value = 'http://176.65.139.232/bot.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c4b78e0-d3a8-5191-2053-00005b7cfe94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/aarch64","pattern":"[url:value = 'https://iloveboats.st/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e42043af-074c-ba2a-d1cf-0000c6686319","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/disconnectraw.mipsel","pattern":"[url:value = 'https://mail.quietsurfwi.help/disconnectraw.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b80ec84-f1a5-3ccb-f58c-00000d39c939","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/disconnectraw.x86","pattern":"[url:value = 'https://mail.quietsurfwi.help/disconnectraw.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3edb59a-f599-3b40-df76-000043fbbc63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/disconnectraw.mips","pattern":"[url:value = 'https://quietsurfwi.help/disconnectraw.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95b09bc9-2391-cfc6-14ee-000033dc08a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/k.sh","pattern":"[url:value = 'https://mail.quietsurfwi.help/k.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73988d49-451e-4b39-2c8b-0000fbc40ee2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/x86_64","pattern":"[url:value = 'https://mail.quietsurfwi.help/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2ed7517-73a1-ad7a-a37a-000061ece3cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/mips","pattern":"[url:value = 'https://quietsurfwi.help/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdc82c20-f73c-692b-5fb6-000060b5229f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/killbotx.x86_64","pattern":"[url:value = 'https://iloveboats.st/killbotx.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ae82a0c-20bb-a589-8059-00003cd61ad2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/disconnectraw.arm4","pattern":"[url:value = 'https://iloveboats.st/disconnectraw.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc9d4f69-fa38-863a-a7ec-00004a2f09ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/disconnectraw.aarch64","pattern":"[url:value = 'https://mail.quietsurfwi.help/disconnectraw.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6698220b-8579-9772-c82c-0000a145f77f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/aarch64","pattern":"[url:value = 'https://mail.quietsurfwi.help/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68c26395-cabf-9c40-194f-00003414a425","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/disconnectraw.x86","pattern":"[url:value = 'https://iloveboats.st/disconnectraw.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bca46db-01a8-84af-c28b-0000a8385c79","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/arm4","pattern":"[url:value = 'https://iloveboats.st/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--131b2ba1-aeb8-b422-5956-0000d0d9466f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/k.sh","pattern":"[url:value = 'https://quietsurfwi.help/k.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3799610a-b386-7ec3-2f6f-00000cd4b149","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/disconnectraw.mips","pattern":"[url:value = 'https://iloveboats.st/disconnectraw.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--103b4871-30c0-245c-cbaf-000028ee6bf0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/disconnectraw.arm4","pattern":"[url:value = 'https://mail.quietsurfwi.help/disconnectraw.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c94659c8-d946-f5da-26a6-00009f0c8027","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/disconnectraw.x86_64","pattern":"[url:value = 'https://mail.quietsurfwi.help/disconnectraw.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a161b5d-18a4-0ca4-5986-0000cdf086fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/x86_64","pattern":"[url:value = 'https://iloveboats.st/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--974d536b-268a-a694-95e2-0000290f5242","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/k.sh","pattern":"[url:value = 'https://iloveboats.st/k.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dc671a7-8baa-8afa-9edb-00006c6221f4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.x86_64","pattern":"[url:value = 'http://176.65.139.232/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30833fac-1aed-9fc6-0e9b-0000087b193c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.i686","pattern":"[url:value = 'http://176.65.139.232/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--326fabd8-b859-c194-ef59-0000e71238ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.arm7","pattern":"[url:value = 'http://176.65.139.232/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e617b164-0703-481d-ed14-0000c5a53c8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.mips","pattern":"[url:value = 'http://176.65.139.232/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05952fa8-82fa-1cc5-d5c0-0000b16416d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.sh4","pattern":"[url:value = 'http://176.65.139.232/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a2d424c-75cb-454b-b861-00000a6640e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/killbotx.x86_64","pattern":"[url:value = 'https://mail.quietsurfwi.help/killbotx.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5efe972e-44da-0af1-3ac1-0000a2a0eddc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/mipsel","pattern":"[url:value = 'https://mail.quietsurfwi.help/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2df25610-f205-58bf-3edb-000057028f11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/disconnectraw.mipsel","pattern":"[url:value = 'https://quietsurfwi.help/disconnectraw.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58a4e295-cd6a-a479-140c-0000b25dc972","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.26.69:40361/i","pattern":"[url:value = 'http://110.37.26.69:40361/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21d4b388-847d-7f64-cb2d-00005506e401","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.aarch64","pattern":"[url:value = 'http://176.65.139.232/bot.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70c7cdff-7ba0-746d-742c-000031ba8f23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.ppc","pattern":"[url:value = 'http://176.65.139.232/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ad84afc-82d5-c68c-a743-0000ca363219","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://217.60.241.91/bin/support.client.exe","pattern":"[url:value = 'https://217.60.241.91/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e99b8d0f-8947-d18b-f0e8-000016daaeb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://217.60.241.91/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://217.60.241.91/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b132d146-b2fa-2f86-1074-0000d09511b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.32.80/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://94.154.32.80/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c77b8e9d-1d50-418f-017b-0000636a73bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.32.228/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.228/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b701a83f-7048-5c7c-04b8-0000ca98e1c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.32.228/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.228/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--540893da-6f41-9beb-c516-000020dfa4f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.106.46:52448/bin.sh","pattern":"[url:value = 'http://112.248.106.46:52448/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f06b34d4-6eb5-df6b-755c-00001fbc9395","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/disconnectraw.x86_64","pattern":"[url:value = 'https://iloveboats.st/disconnectraw.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--810b0206-ec0b-0734-0963-0000551f8297","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.145.118:58396/bin.sh","pattern":"[url:value = 'http://115.63.145.118:58396/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b23e931-3ad2-8b75-e6b4-0000fc04f355","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.61.41.247:51273/bin.sh","pattern":"[url:value = 'http://115.61.41.247:51273/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adea0b27-05ab-5cde-fd80-00006a5fc7cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.25.149.153:39654/i","pattern":"[url:value = 'http://78.25.149.153:39654/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7b37814-ad01-38b8-3ab8-00005ad75f6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.61.41.247:51273/i","pattern":"[url:value = 'http://115.61.41.247:51273/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60d6e02b-bb75-8a21-10eb-0000f1a068c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.147.226:56122/i","pattern":"[url:value = 'http://115.56.147.226:56122/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84dab1cd-f055-0558-2f21-0000f6d9e40a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.136.97.153:39448/bin.sh","pattern":"[url:value = 'http://110.136.97.153:39448/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ff58d37-f655-d545-89f8-000096a85601","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/unifi.bak.20260810122841","pattern":"[url:value = 'http://95.155.151.113/unifi.bak.20260810122841']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c55f9ed3-3dd9-7c9b-48e4-00006faf25f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.51.94:48009/i","pattern":"[url:value = 'http://115.63.51.94:48009/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c54d6c44-ad82-281b-9307-000042c079f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.136.97.153:39448/i","pattern":"[url:value = 'http://110.136.97.153:39448/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34ecd100-b49b-76f8-d825-0000c5e91f97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7d8668","pattern":"[url:value = 'http://5.182.210.174/7d8668']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0576a084-c862-68f8-6be8-0000052b9e17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/4850bd","pattern":"[url:value = 'http://5.182.210.174/4850bd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--128128e4-c67f-4284-1d19-00009d7f20dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ff5279","pattern":"[url:value = 'http://5.182.210.174/ff5279']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--014a23af-99f3-1d1d-a24f-00000ef2801d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/5490a4","pattern":"[url:value = 'http://5.182.210.174/5490a4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2437714f-3cc5-707e-6d52-0000012962cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2150fc","pattern":"[url:value = 'http://5.182.210.174/2150fc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62ec4227-9911-d047-3569-0000a287967d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3e070d","pattern":"[url:value = 'http://5.182.210.174/3e070d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--581b1cb8-58a6-2824-cc94-000053297eef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e26c93","pattern":"[url:value = 'http://5.182.210.174/e26c93']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49e1bfd3-bb20-8154-3f36-0000cfe9ae17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/45d538","pattern":"[url:value = 'http://5.182.210.174/45d538']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9254dddc-6d40-b5f2-ea76-00002875a7d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ad704a","pattern":"[url:value = 'http://5.182.210.174/ad704a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f29b82a-b958-b7a2-6dc0-0000af023a4b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/498482","pattern":"[url:value = 'http://5.182.210.174/498482']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d1b042e-91de-bd2a-bdee-000028ac2221","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/def5c2","pattern":"[url:value = 'http://5.182.210.174/def5c2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da6e03fd-d828-8c98-d864-0000c84dba6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bd9da7","pattern":"[url:value = 'http://5.182.210.174/bd9da7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fea9f9a-eae2-a28f-d4ea-0000b2f4e524","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e00f60","pattern":"[url:value = 'http://5.182.210.174/e00f60']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07175a33-2817-88f4-b01b-000011dc2e79","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/650040","pattern":"[url:value = 'http://5.182.210.174/650040']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a2e2c0b-1158-eca3-9aa7-00001dc4ccb4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/894fc5","pattern":"[url:value = 'http://5.182.210.174/894fc5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f55d72dd-8956-9c6b-3b00-000079f4d505","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e40c97","pattern":"[url:value = 'http://5.182.210.174/e40c97']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a189028-b062-9720-214e-0000a0054090","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/17949b","pattern":"[url:value = 'http://5.182.210.174/17949b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a88be2fa-6d7f-b25f-816b-00005a0778c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.60/fallen.arm4","pattern":"[url:value = 'http://94.154.43.60/fallen.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c86f8847-5c37-eeab-ee80-0000aff4b0a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9ea4b7","pattern":"[url:value = 'http://5.182.210.174/9ea4b7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71b447ae-eb01-cd6e-4bb2-000054a49be2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/05416a","pattern":"[url:value = 'http://5.182.210.174/05416a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6a6605b-28f9-4385-3791-0000ced7e953","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0654cb","pattern":"[url:value = 'http://5.182.210.174/0654cb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c368b1a-3e51-e23c-1169-0000f20ab73d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/dca7ad","pattern":"[url:value = 'http://5.182.210.174/dca7ad']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ff65fc2-624d-aca3-f51a-00000fa0115d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d69405","pattern":"[url:value = 'http://5.182.210.174/d69405']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e15e3a1d-ae22-751d-e22a-000049f2d7e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ea4b38","pattern":"[url:value = 'http://5.182.210.174/ea4b38']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb216b7d-592f-2476-ae71-0000623f1c54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/4a200f","pattern":"[url:value = 'http://5.182.210.174/4a200f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e6cd3b7-d99c-b77b-2967-0000da76169a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6441d0","pattern":"[url:value = 'http://5.182.210.174/6441d0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee4f433e-ae38-a679-a08f-0000e7b4cd1d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c1e2ea","pattern":"[url:value = 'http://5.182.210.174/c1e2ea']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eab61b86-7807-d979-3714-00009afaff55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f4403a","pattern":"[url:value = 'http://5.182.210.174/f4403a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c12c7113-8c5b-b1cf-f0a1-0000eeea7c12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9e14a1","pattern":"[url:value = 'http://5.182.210.174/9e14a1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae1a405b-1b23-0118-4bd1-00009984322e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f41d69","pattern":"[url:value = 'http://5.182.210.174/f41d69']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbfc4c6a-8e89-4150-9cc4-000059f1b5dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/8f41cf","pattern":"[url:value = 'http://5.182.210.174/8f41cf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--425fa11d-e863-c311-162f-0000ac40b402","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7ba4cb","pattern":"[url:value = 'http://5.182.210.174/7ba4cb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2b39a63-d4d7-df52-e012-00006721b093","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9cb1d9","pattern":"[url:value = 'http://5.182.210.174/9cb1d9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7eb396b3-e8c2-9382-4475-0000461dca33","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/76e8cc","pattern":"[url:value = 'http://5.182.210.174/76e8cc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fa06d6f-bd47-31fc-8af8-0000b1787f9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/84e985","pattern":"[url:value = 'http://5.182.210.174/84e985']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b12dd66-55be-62ab-e58c-00007f03385d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d72242","pattern":"[url:value = 'http://5.182.210.174/d72242']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f296e7a-6d07-bb88-c624-000014dc76f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6501cd","pattern":"[url:value = 'http://5.182.210.174/6501cd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3182b340-de94-e00f-f53e-000048b2d728","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.60/fallen.arm7","pattern":"[url:value = 'http://94.154.43.60/fallen.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--313f695a-208e-929f-b778-00009704132a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_e1854d916cb8bd04.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_e1854d916cb8bd04.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b802381-3f69-b7bc-cd1a-00004790c043","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_065966cf70492303.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_065966cf70492303.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3d53f3f-a048-0411-5a8c-00007526ebb7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_8a1ac3d8be0488af.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_8a1ac3d8be0488af.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f44664e9-7232-465c-ef17-0000cc6be473","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4d1070b391f2b07d.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4d1070b391f2b07d.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfbc24d5-cc23-55ab-1817-00004c0bacbb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4270dd8330a6acbc.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4270dd8330a6acbc.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a752c94-5512-6230-0b25-00001732bbd5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.11.225:7001/bin.sh","pattern":"[url:value = 'http://110.36.11.225:7001/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bb28533-ce44-fc8d-4f94-0000b1c0a082","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_fa7d2d7d3c7be176.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_fa7d2d7d3c7be176.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25f3e1a2-8800-8563-cec4-00004d5bad8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3481d91a938ab342.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3481d91a938ab342.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8456c34c-57cc-cc68-83b4-0000ef2941c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_b6eb436102b82c86.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_b6eb436102b82c86.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3758d21-9c2d-3364-d0f8-000063bb0a6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.247.84.112:59435/i","pattern":"[url:value = 'http://112.247.84.112:59435/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb4f0368-c728-8ab2-4461-00007ffcd00f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.177.86:33235/bin.sh","pattern":"[url:value = 'http://115.58.177.86:33235/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f4a901c-b5ce-53c5-13be-000006023d31","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://183.153.126.58:36155/i","pattern":"[url:value = 'http://183.153.126.58:36155/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cd69849-d3e0-8d8f-cb87-00005d15844e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.116.20.47:46175/i","pattern":"[url:value = 'http://119.116.20.47:46175/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--248b92ce-a649-2170-13f6-0000565a4cf0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.116.20.47:46175/bin.sh","pattern":"[url:value = 'http://119.116.20.47:46175/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f224b435-c4c6-25c7-879f-00006a7ced4a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.18.11.118:36365/bin.sh","pattern":"[url:value = 'http://60.18.11.118:36365/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6038d2b-9ee4-712d-5f7d-0000d74a5be5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.234.166.234:40751/bin.sh","pattern":"[url:value = 'http://42.234.166.234:40751/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eee1e149-1142-c792-ec15-00001b55e34c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://124.235.239.199:45573/bin.sh","pattern":"[url:value = 'http://124.235.239.199:45573/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48891a3b-689b-0d7f-63d9-0000f8018ec8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.48.28.98:35726/i","pattern":"[url:value = 'http://36.48.28.98:35726/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1588d6d5-c755-037e-7928-00004b35dbeb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.57.227:57005/bin.sh","pattern":"[url:value = 'http://115.55.57.227:57005/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa89fc4b-7815-bc59-d463-0000a4d4b240","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.174.78:56482/bin.sh","pattern":"[url:value = 'http://42.235.174.78:56482/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--482e612a-7e98-f070-a1e9-0000619cd1f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.31.73:46065/i","pattern":"[url:value = 'http://182.113.31.73:46065/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93045fe3-870d-94d5-a226-0000659cae46","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.77.117.255:35209/bin.sh","pattern":"[url:value = 'http://39.77.117.255:35209/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4b5d322-fc4e-cd07-6584-0000dea1061b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.123.209.29:47837/i","pattern":"[url:value = 'http://182.123.209.29:47837/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c15b8c19-38db-fe48-d06d-00008c0e82ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.235.239.199:45573/i","pattern":"[url:value = 'http://124.235.239.199:45573/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92d29d20-2bf3-2b6e-5b45-000060094473","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.68.164:58733/i","pattern":"[url:value = 'http://61.52.68.164:58733/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d64d3c24-013e-5f19-b3e7-0000b0acef96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.205.10.123:45052/bin.sh","pattern":"[url:value = 'http://221.205.10.123:45052/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb32b6d4-4b63-80fe-9f8d-000004be8047","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.18.11.118:36365/i","pattern":"[url:value = 'http://60.18.11.118:36365/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c34bbd76-1295-add6-4c1e-0000146f1962","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.77.117.255:35209/i","pattern":"[url:value = 'http://39.77.117.255:35209/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fab55aa9-abfc-304f-f357-0000d980d166","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.156.105.15:56982/i","pattern":"[url:value = 'http://219.156.105.15:56982/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ca0f324-228f-d79f-fe80-00002275ba28","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.205.10.123:45052/i","pattern":"[url:value = 'http://221.205.10.123:45052/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9e87539-d537-2460-bcf6-000023557ce1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://waf.proxytunnel.co:889/gg11","pattern":"[url:value = 'http://waf.proxytunnel.co:889/gg11']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4b15a7c-1618-a43c-bdeb-000055afe2ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.193.62:36489/Mozi.m","pattern":"[url:value = 'http://112.198.193.62:36489/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d2535b9-f91f-a6cc-6cca-0000d7cc96fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.193.62:36489/i","pattern":"[url:value = 'http://112.198.193.62:36489/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd071657-0957-11b0-922e-00001f795d52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.193.62:36489/Mozi.a","pattern":"[url:value = 'http://112.198.193.62:36489/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18da9424-b63c-ee5f-140b-0000b819df5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.193.62:36489/bin.sh","pattern":"[url:value = 'http://112.198.193.62:36489/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90f99686-f70a-3f33-50f6-0000f2b44528","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.177.86:33235/i","pattern":"[url:value = 'http://115.58.177.86:33235/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5ce02db-6436-ed55-65ee-00003b4012bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.127.103.153:37513/bin.sh","pattern":"[url:value = 'http://182.127.103.153:37513/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de2c5670-2e45-0b72-8066-00007ebebb11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://66.8.135.142:50647/bin.sh","pattern":"[url:value = 'http://66.8.135.142:50647/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e326cff-b9ff-ba11-3072-00004b710426","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.90.13:33466/i","pattern":"[url:value = 'http://123.8.90.13:33466/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7349ed5-6e70-9d1c-33ff-0000b142e183","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.138.178:59015/bin.sh","pattern":"[url:value = 'http://112.198.138.178:59015/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--643098e1-977f-623b-84af-0000c317cfe3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://66.8.135.142:50647/i","pattern":"[url:value = 'http://66.8.135.142:50647/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8279d7b-b824-4d45-8901-0000cd37838b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.94.77:54061/bin.sh","pattern":"[url:value = 'http://42.235.94.77:54061/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b8d18ed-8a57-55c9-a89e-0000445e6102","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.94.77:54061/i","pattern":"[url:value = 'http://42.235.94.77:54061/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b2c965f-f5b8-901f-3026-000086556d57","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/mini.arm7","pattern":"[url:value = 'http://95.155.151.113/d/mini.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dfbb9d2-81a8-4b8f-dc1b-000065139a88","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/mini.x86","pattern":"[url:value = 'http://95.155.151.113/d/mini.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11724a8a-8745-2b1d-bff2-0000ac496c76","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/mini.arm64","pattern":"[url:value = 'http://95.155.151.113/d/mini.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df548ce3-337f-700f-89eb-0000a4e26922","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/mini.mips","pattern":"[url:value = 'http://95.155.151.113/d/mini.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--521f6583-f42c-4da1-3933-000082877232","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.53.51.109:44329/bin.sh","pattern":"[url:value = 'http://42.53.51.109:44329/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a864a2a-cbae-73c8-e76e-0000cfe10768","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/mini.mpsl","pattern":"[url:value = 'http://95.155.151.113/d/mini.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a16c0a79-0617-d128-2f40-000011bdd329","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/mini.x86_64","pattern":"[url:value = 'http://95.155.151.113/d/mini.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50993476-d535-fd27-bbcc-000096f3890b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.138.178:59015/i","pattern":"[url:value = 'http://112.198.138.178:59015/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55894959-21ed-85c9-6306-000022c49f0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.45.64.34:37683/bin.sh","pattern":"[url:value = 'http://125.45.64.34:37683/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--828ab63e-c8cb-00bc-9890-00006571eeb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.45.64.34:37683/i","pattern":"[url:value = 'http://125.45.64.34:37683/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3bf6e69-cf34-adcc-e989-000013d05dc6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.173.101.27:46920/bin.sh","pattern":"[url:value = 'http://123.173.101.27:46920/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d2a0fa1-2551-69bd-fb30-000070efa7ad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.173.101.27:46920/i","pattern":"[url:value = 'http://123.173.101.27:46920/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--135bdeb1-48e7-368e-df9a-0000d3e8b177","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.43.60:47091/bin.sh","pattern":"[url:value = 'http://125.44.43.60:47091/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ea066d4-5075-e611-040c-00009b87b7b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.92.80.153:35984/i","pattern":"[url:value = 'http://124.92.80.153:35984/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56cdd181-43c3-a410-07ae-000069777e1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.94.69:44759/bin.sh","pattern":"[url:value = 'http://61.52.94.69:44759/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa797254-4617-81a1-ff26-0000ab131184","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://38.43.193.197:44535/bin.sh","pattern":"[url:value = 'http://38.43.193.197:44535/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--472e07b1-fb69-8713-15d1-0000a37d4ac6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.172.13.19:60669/i","pattern":"[url:value = 'http://175.172.13.19:60669/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdc7841c-0980-abe3-7f57-0000bba5152b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.21:51285/bin.sh","pattern":"[url:value = 'http://210.208.110.21:51285/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c61ec185-648e-172a-d074-00003b66476f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://38.43.193.197:44535/i","pattern":"[url:value = 'http://38.43.193.197:44535/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39539dde-5c6e-4d55-8a7b-000045eca9b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.202.64:34690/i","pattern":"[url:value = 'http://219.155.202.64:34690/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60e5b6e8-10a2-904a-da83-00003178db1f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.180.15.83:57232/bin.sh","pattern":"[url:value = 'http://42.180.15.83:57232/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43a41de6-48c7-0c6e-2a2f-000077cee212","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.147.159.41:36190/bin.sh","pattern":"[url:value = 'http://175.147.159.41:36190/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0d723ae-6a24-7903-2832-0000818e0572","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.21:51285/i","pattern":"[url:value = 'http://210.208.110.21:51285/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2895e21-0624-8a5d-59a3-00007da522e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.94.69:44759/i","pattern":"[url:value = 'http://61.52.94.69:44759/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8daad9a0-4390-be22-1dbd-00004bf72ce3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.25.149.153:39654/bin.sh","pattern":"[url:value = 'http://78.25.149.153:39654/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3cbc1a2-a113-4876-ad0e-0000f0dd3124","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://211.158.166.117:51581/i","pattern":"[url:value = 'http://211.158.166.117:51581/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67568aea-2677-dd34-1cae-0000136794bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://71.207.128.92:54954/i","pattern":"[url:value = 'http://71.207.128.92:54954/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49bac6af-47fe-04a6-cef6-0000904675e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.98.44:53110/i","pattern":"[url:value = 'http://115.50.98.44:53110/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f61b257-f4ed-e44b-6d46-000071c3e040","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://121.234.156.10:48875/bin.sh","pattern":"[url:value = 'http://121.234.156.10:48875/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa0422cb-96cd-8b22-fa85-0000c953be9c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.176.25.195:35054/i","pattern":"[url:value = 'http://160.176.25.195:35054/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0f3b117-ef49-8166-3473-00003475cce4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.223.124:58798/bin.sh","pattern":"[url:value = 'http://125.44.223.124:58798/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66373e4d-3e3d-0072-f652-0000754ce529","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_57593b4d53209e53.cmd","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_57593b4d53209e53.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8061d6a-106e-d2dc-8a8b-0000a739c2d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.229.251:51013/bin.sh","pattern":"[url:value = 'http://182.119.229.251:51013/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b769c35-701c-f3c1-916e-0000b24473d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.195.159:54905/bin.sh","pattern":"[url:value = 'http://219.155.195.159:54905/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4dddfe4-dfad-681f-b042-0000a45f4a8f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.217.13:59440/bin.sh","pattern":"[url:value = 'http://61.52.217.13:59440/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eef473a-f5e1-56a7-9930-00005207034d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.54.222:37664/bin.sh","pattern":"[url:value = 'http://115.58.54.222:37664/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2e3eba9-f181-50b2-e8b7-0000a656ba16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.37.213:45304/i","pattern":"[url:value = 'http://42.230.37.213:45304/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04bf0e12-94d6-6eac-593f-00002e89b127","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.108.113:57428/i","pattern":"[url:value = 'http://42.232.108.113:57428/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d168d737-df39-8c53-5cfb-000058420cd8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.223.124:58798/i","pattern":"[url:value = 'http://125.44.223.124:58798/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3584a696-3fdf-3128-26c1-00001f60dd8f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.217.13:59440/i","pattern":"[url:value = 'http://61.52.217.13:59440/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13014b24-acb2-2c90-8869-0000afb80dd9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.54.222:37664/i","pattern":"[url:value = 'http://115.58.54.222:37664/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9703497-ef04-25c8-680d-0000e70569e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.195.159:54905/i","pattern":"[url:value = 'http://219.155.195.159:54905/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8422b44-0c8e-02d4-6250-00006d47bd8f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.19.167:51278/bin.sh","pattern":"[url:value = 'http://125.44.19.167:51278/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d864e57-19b6-84ed-6dd1-0000f7a43998","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.86.83:33716/bin.sh","pattern":"[url:value = 'http://110.36.86.83:33716/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f63bfb8-57a6-9065-acb8-000088dd688c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://140.237.36.213:34302/i","pattern":"[url:value = 'http://140.237.36.213:34302/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36178fb6-32f3-9275-6918-00000a6dc679","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://myissuereport.live/i/PDF-ticket/download.php","pattern":"[url:value = 'https://myissuereport.live/i/PDF-ticket/download.php']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0491f833-de1d-c1e2-4ce8-00008936d604","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://server.servermsn.life/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest","pattern":"[url:value = 'https://server.servermsn.life/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3c727d1-9905-d3b4-2b52-0000a7f8ff3c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.173.164:46012/i","pattern":"[url:value = 'http://123.5.173.164:46012/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e99d9cd2-081a-baf2-5cd0-000029318ef6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.19.167:51278/i","pattern":"[url:value = 'http://125.44.19.167:51278/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7985b6e6-c065-56a3-fab0-000076549754","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.131.159:42876/bin.sh","pattern":"[url:value = 'http://123.129.131.159:42876/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8d6560e-44e0-f3fb-ce87-00007db9e53f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.4.178.145:35087/i","pattern":"[url:value = 'http://123.4.178.145:35087/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05423c79-4124-1f99-34ba-000044774f37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_908baa13e195f0df.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_908baa13e195f0df.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09410297-e192-489f-d71e-00003fc7f856","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_563d9411d8da8c10.cmd","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_563d9411d8da8c10.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5892f4ee-bbe7-f055-ce42-000039db6e8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_a5c4d0900e07c7c4.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_a5c4d0900e07c7c4.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e2e801e-e34f-15a0-1f93-0000059b5e4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_f63b7e69efeb725b.cmd","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_f63b7e69efeb725b.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6acb7694-ec33-675b-5bfd-00007bbf90a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/Exodus.sh","pattern":"[url:value = 'http://176.65.139.228:6677/Exodus.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92166770-719f-ffe3-370c-00007eef655d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/mips","pattern":"[url:value = 'http://176.65.139.228:6677/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed7172b2-8f87-2b39-36d8-000008a735e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/x86","pattern":"[url:value = 'http://176.65.139.228:6677/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf726934-8118-4c63-d12a-0000dd20c8a3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.arc","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a230d146-1977-c214-5a7a-00003e9b708c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.arm6","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf58b629-18fc-467e-c4c2-000014c5e8f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/ohshit.sh","pattern":"[url:value = 'http://209.141.44.218/ohshit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09e86f60-1ef7-37dc-214e-0000f01593a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/x32","pattern":"[url:value = 'http://176.65.139.228:6677/bins/x32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1bebf75-55e9-a966-3601-0000e9c8c308","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/mipsel","pattern":"[url:value = 'http://176.65.139.228:6677/bins/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7427055a-eb1b-f36a-75b1-00004d20af92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.32.99/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.99/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96c2eddd-1461-7c82-737d-0000ef9dcd66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.32.99/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.99/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d946a51-d3ed-f53b-3869-0000f178d574","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.235.243.150:48322/i","pattern":"[url:value = 'http://124.235.243.150:48322/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7186526-d68f-746c-45aa-0000c350788f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://195.177.94.197/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.197/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63ac3c48-c1cd-e99b-b9be-0000266c0f89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://yogasitesdev.wpengine.com/2/","pattern":"[url:value = 'https://yogasitesdev.wpengine.com/2/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a675331-1430-ea0c-655e-0000939f304f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://195.177.94.84/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.84/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e73ab47-ec27-ee74-d7ba-0000055c9b11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://195.177.94.84/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.84/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1f63c84-10fb-b403-262e-00003567d8c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://149.50.154.101:8000/payload.sh","pattern":"[url:value = 'http://149.50.154.101:8000/payload.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1215e6b6-ead8-f6b5-ac16-0000505c779f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.loong64","pattern":"[url:value = 'http://92.5.66.49:8080/bot.loong64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0cf6339-b429-218f-2d7a-00009ac77c44","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.192.88.110:35897/bin.sh","pattern":"[url:value = 'http://115.192.88.110:35897/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aea0746f-fdd8-2956-63f3-00002a78d607","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.203.6:36171/bin.sh","pattern":"[url:value = 'http://115.49.203.6:36171/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d276a9d-ccc1-9bd3-669f-00003ba55876","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ac8c9f","pattern":"[url:value = 'http://5.182.210.174/ac8c9f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b71b6c78-7919-741b-7aef-0000edb991b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bf39af","pattern":"[url:value = 'http://5.182.210.174/bf39af']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eee0a026-6ee0-4d6f-8a12-0000c6bb2183","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/81ee8a","pattern":"[url:value = 'http://5.182.210.174/81ee8a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06b65fb7-8a76-bfb1-2b8d-00002b46fa1f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/Zzz","pattern":"[url:value = 'http://129.121.110.105/Zzz']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e25deb51-0c96-3e5d-9abe-0000315806a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e748fa","pattern":"[url:value = 'http://5.182.210.174/e748fa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f56e3eb-9c9c-ffcb-4b41-0000a69a2e5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/vkZ","pattern":"[url:value = 'http://129.121.110.105/vkZ']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76f65803-23c8-535c-80f0-0000d08c7bf4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b73206","pattern":"[url:value = 'http://5.182.210.174/b73206']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--098f0077-f0e7-9570-6480-0000d8cfa5c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2020be","pattern":"[url:value = 'http://5.182.210.174/2020be']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed071e35-a871-c17d-f2f5-00009cf3c844","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cf3066","pattern":"[url:value = 'http://5.182.210.174/cf3066']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a24fcfd1-d299-2acd-bcf1-0000d23c8d8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/oaF","pattern":"[url:value = 'http://129.121.110.105/oaF']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5e77e2a-5859-c74a-f938-00004e7ea5ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/30e00c","pattern":"[url:value = 'http://5.182.210.174/30e00c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a28d6c67-efa4-08b0-bdf5-0000e3af439f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/ozDb","pattern":"[url:value = 'http://129.121.110.105/ozDb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e48a461-84db-6175-c419-00000f0f54c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/968def","pattern":"[url:value = 'http://5.182.210.174/968def']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--626ac114-619b-f009-580a-000090df2029","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/f2Um","pattern":"[url:value = 'http://129.121.110.105/f2Um']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3124389-034e-5ea7-88d5-0000327f08fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/63ab9c","pattern":"[url:value = 'http://5.182.210.174/63ab9c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c122cf2-bf19-02d4-a21c-000088bef8fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9aaf74","pattern":"[url:value = 'http://5.182.210.174/9aaf74']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26fe9173-141f-0f92-b400-0000909ef7c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/05f7c6","pattern":"[url:value = 'http://5.182.210.174/05f7c6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7019b162-c444-4a73-d35a-000026906da9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/WzCx","pattern":"[url:value = 'http://129.121.114.124/WzCx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f28ca8d-12f4-6fbf-f03f-0000193b5a2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/1Gk","pattern":"[url:value = 'http://129.121.114.124/1Gk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6a6e3fe-0b9f-8bdc-70f3-000001cabd70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/4YN","pattern":"[url:value = 'http://129.121.114.124/4YN']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56d9a783-d14e-b823-033d-0000094ca07f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/1sPM","pattern":"[url:value = 'http://129.121.114.124/1sPM']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78c19650-5b30-274a-4646-000053b2b4dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/FyTv","pattern":"[url:value = 'http://129.121.114.124/FyTv']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8601ce0-c3eb-7c2a-e3c6-0000f651a9a3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/arm5","pattern":"[url:value = 'http://176.65.139.228:6677/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52234cfd-bad3-f48f-abfb-0000b7c1d404","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://195.177.94.22/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.22/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67803707-8552-e537-7736-00008c867058","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://195.177.94.22/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.22/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5f220a6-c1cb-9722-728d-0000efb4d30b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.sh4","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b49d3da5-d741-274d-7897-0000cf937dd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.mpsl","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b3980fc-104b-77ef-effb-00002c2edf62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.arm5","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d316b479-3e61-cabf-ece4-0000db2bc84f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.x86_64","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92e67ca8-42f1-feef-d91d-0000e9fe3853","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.spc","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90a0c2f1-25f7-748f-f49a-00006f6a4afd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.ppc","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d537e1d0-d2e5-ca4a-7367-0000862717e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.arm7","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7db75a4-d24e-2eff-e671-0000694e362a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.i686","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad64a143-7939-1476-cdcc-00007b695e73","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.i468","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.i468']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd12f33f-b6e1-2789-13ae-000017692488","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.x86","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d63cfba-4e9a-9c12-80b5-0000a466c546","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.m68k","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--014ffb6c-a46f-c431-41e8-0000a490139c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.mips","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58ca4433-a5b1-80bd-e548-00003dffbf90","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.arm","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f85c38bc-0d94-af8f-cfbc-00004d70e306","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.224.17.122/pin_img.png","pattern":"[url:value = 'http://64.224.17.122/pin_img.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--746e05ac-dfb8-5beb-e2ce-0000f36959c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.224.17.122/pinmsi.png","pattern":"[url:value = 'http://64.224.17.122/pinmsi.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--876277d0-b74a-fa1d-5425-0000ba3d9f5c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://bapak178.org/efd.dat","pattern":"[url:value = 'https://bapak178.org/efd.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef2476bb-83dc-5863-56ca-0000781b6e11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://admetricslab.org/get_verify?i=27407","pattern":"[url:value = 'https://admetricslab.org/get_verify?i=27407']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57374267-3ce0-f77e-57a5-0000c31c10d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://bapak178.org/gwb.dat","pattern":"[url:value = 'https://bapak178.org/gwb.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1b8334e-6581-3cde-e078-0000bfa3bb3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://ownnewstoday.live/MicrosoftVerify.msi","pattern":"[url:value = 'https://ownnewstoday.live/MicrosoftVerify.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9c735e3-ba53-ac45-c274-0000f8e3be3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.192.88.110:35897/i","pattern":"[url:value = 'http://115.192.88.110:35897/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cc9a805-d1a7-bc8a-1384-000076dbcbac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.203.6:36171/i","pattern":"[url:value = 'http://115.49.203.6:36171/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1dc3b58-55dd-ab40-b3c5-0000250e4b80","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-90177fa65de34e95abc6e25ef90c545b.r2.dev/ALE123.exe","pattern":"[url:value = 'https://pub-90177fa65de34e95abc6e25ef90c545b.r2.dev/ALE123.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61cb92b7-51f0-0605-8032-00007ba65efa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/files/gold/random.exe","pattern":"[url:value = 'http://62.60.226.140/files/gold/random.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ff94e69-b75e-b711-5835-000019eb9d0d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/amka/random.exe","pattern":"[url:value = 'http://62.60.226.140/amka/random.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b2ef09b-529c-56aa-7477-0000cd5afec6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://147.182.181.241/26/weneedsomethingseriouslyforhittargets.hta","pattern":"[url:value = 'http://147.182.181.241/26/weneedsomethingseriouslyforhittargets.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86e851ee-4bf6-dcd0-d08f-00005a7bbedd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://147.182.181.241/img/img_220749.png","pattern":"[url:value = 'http://147.182.181.241/img/img_220749.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--515a7305-40a7-8959-18a8-00007d1115cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/ojscrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/ojscrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f645fff-d6d2-f49f-3298-00003d1295a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://duct-master.com/00/newMSI_PRO.png","pattern":"[url:value = 'https://duct-master.com/00/newMSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c607f59f-84f6-8ea5-92cb-0000f5963afe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.108.113:57428/bin.sh","pattern":"[url:value = 'http://42.232.108.113:57428/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f73237b3-e471-dde7-5fba-00006bbef4a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://58.255.40.244:42822/bin.sh","pattern":"[url:value = 'http://58.255.40.244:42822/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82a1727c-709b-f0f2-ce1f-000015455c12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.156.166.167:43949/i","pattern":"[url:value = 'http://94.156.166.167:43949/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dd186ef-ece2-156f-08f7-0000cac50fe1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://del.sou.pp.ua/install_tm.sh","pattern":"[url:value = 'https://del.sou.pp.ua/install_tm.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db1ed920-0a77-f1c5-14b0-000066ce40a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://del.sou.pp.ua/install.sh","pattern":"[url:value = 'https://del.sou.pp.ua/install.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaa3df7c-7ef0-57ba-85a1-0000e0e2fff2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.173.47.72/22/goodthingsforbestfutureforme.hta","pattern":"[url:value = 'http://107.173.47.72/22/goodthingsforbestfutureforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd7d7d7d-36be-daf2-f257-00001c7ab46a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.173.47.72/22/img_172149.png","pattern":"[url:value = 'http://107.173.47.72/22/img_172149.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c98c4c9b-5a44-b576-ff10-0000bdf2dd74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.172.216/125/givingbesththignsfrobetterplaces.hta","pattern":"[url:value = 'http://107.172.172.216/125/givingbesththignsfrobetterplaces.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfd9bf2e-fbeb-beff-d313-00005af7f6fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.172.172.216/125/img_000358.png","pattern":"[url:value = 'http://107.172.172.216/125/img_000358.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82515586-8a73-970c-f706-0000ca6eea6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/46/img_210045.png","pattern":"[url:value = 'http://155.103.69.250/46/img_210045.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5eda470-4ee5-4143-3d4e-0000b457ca73","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/46/weneedbesththingswithbetterplacecomingforme.hta","pattern":"[url:value = 'http://155.103.69.250/46/weneedbesththingswithbetterplacecomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7c7d80e-cbcb-134f-a530-0000b2097047","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://140.237.37.249:40109/bin.sh","pattern":"[url:value = 'http://140.237.37.249:40109/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf378d43-bb7a-ad64-9a8a-0000b03a3581","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://sh.classera.com/Naew8m","pattern":"[url:value = 'https://sh.classera.com/Naew8m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd3602f2-fc4a-1fba-cc60-0000bfba15c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/50/goodthingswithbestnaturealthingsforme.hta","pattern":"[url:value = 'http://155.103.69.250/50/goodthingswithbestnaturealthingsforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79111d42-8d8a-4996-16fd-000012b45097","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/50/goodthingswithbestnaturealthingsforme.hta","pattern":"[url:value = 'https://155.103.69.250/50/goodthingswithbestnaturealthingsforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd21df52-0455-ca84-58f3-0000d1877643","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://raw.githubusercontent.com/sergioo92/fdghhhf/refs/heads/main/obhpmrI.txt","pattern":"[url:value = 'https://raw.githubusercontent.com/sergioo92/fdghhhf/refs/heads/main/obhpmrI.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b94e93e9-26b5-c3e7-395e-0000994d1b76","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://signageinsignia.co.za/kizzy/1.jpg","pattern":"[url:value = 'http://signageinsignia.co.za/kizzy/1.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--526a45cf-e05c-773e-f01a-00004eeca787","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/211/iieomib.txt","pattern":"[url:value = 'http://155.103.69.250/211/iieomib.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67ba7be6-bfec-aaf1-e095-0000be661374","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/211/iieomib.txt","pattern":"[url:value = 'https://155.103.69.250/211/iieomib.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f670eac-fbb9-0b5d-dc2e-000069413880","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://raw.githubusercontent.com/sergioo92/cesadasd/refs/heads/main/cjiFmdi.txt","pattern":"[url:value = 'https://raw.githubusercontent.com/sergioo92/cesadasd/refs/heads/main/cjiFmdi.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9951e7fe-7b3d-87d9-1271-0000467f1fa4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://140.237.37.249:40109/i","pattern":"[url:value = 'http://140.237.37.249:40109/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7613b42-a564-ee33-fe0d-0000816fa201","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://216.9.224.73/50/verygoodthingsforbestpersonenterigninside.hta","pattern":"[url:value = 'http://216.9.224.73/50/verygoodthingsforbestpersonenterigninside.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9872ebc0-3cfd-cb14-78ce-00006658e941","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/211/goodthingsforbestfeelingsarecomingformybest.hta","pattern":"[url:value = 'http://155.103.69.250/211/goodthingsforbestfeelingsarecomingformybest.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fb80649-b143-74d9-4d3b-000018dd6fd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.238.16/42/image_picture_003202490905495093459034.jpg/bestthingswithbestthingswithbetterthings.hta","pattern":"[url:value = 'http://107.172.238.16/42/image_picture_003202490905495093459034.jpg/bestthingswithbestthingswithbetterthings.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6937ac60-cc0b-01bf-cffe-000006aed80d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.238.17/23/ecv/sccsq.hta","pattern":"[url:value = 'http://107.172.238.17/23/ecv/sccsq.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2423c8a-aa86-9dce-0bd9-0000f3f58269","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/223/nicepeopelscarecomngfrobestthingstobebestform.hta","pattern":"[url:value = 'http://155.103.69.250/223/nicepeopelscarecomngfrobestthingstobebestform.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dae6503a-c758-83e8-a529-00002e583f2b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/222/goodthingswithbestmagicalthingscomingforme.hta","pattern":"[url:value = 'http://155.103.69.250/222/goodthingswithbestmagicalthingscomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db6058cd-e7c2-a0c0-aa5b-000052d1f662","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.238.16/8/ccr/melvetrakingsbestformebestthignscomingfrom.hta","pattern":"[url:value = 'http://107.172.238.16/8/ccr/melvetrakingsbestformebestthignscomingfrom.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f7a9163-0960-35e6-5e6f-0000666d1391","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/44/goodthingswithbestnationalwithbestfeelings.hta","pattern":"[url:value = 'http://155.103.69.250/44/goodthingswithbestnationalwithbestfeelings.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d73250d3-8e06-5cf2-457e-000009d5c2c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.172.172.216/125/givingbesththignsfrobetterplaces.hta","pattern":"[url:value = 'https://107.172.172.216/125/givingbesththignsfrobetterplaces.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--978583c3-ff87-086c-e8d5-0000eae3d107","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://216.9.224.73/33/weneedbestmagicalapproachforbesthings.hta","pattern":"[url:value = 'https://216.9.224.73/33/weneedbestmagicalapproachforbesthings.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eac2c28-3438-afb7-e5a5-00002479d605","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://216.9.224.73/50/verygoodthingsforbestpersonenterigninside.hta","pattern":"[url:value = 'https://216.9.224.73/50/verygoodthingsforbestpersonenterigninside.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a6ce567-cbb0-0ec9-21a2-0000dee3b24b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/44/goodthingswithbestnationalwithbestfeelings.hta","pattern":"[url:value = 'https://155.103.69.250/44/goodthingswithbestnationalwithbestfeelings.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63eef917-a481-222f-bd3a-00006fd365b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.172.238.16/8/ccr/melvetrakingsbestformebestthignscomingfrom.hta","pattern":"[url:value = 'https://107.172.238.16/8/ccr/melvetrakingsbestformebestthignscomingfrom.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bb0e432-05d1-0ad7-ef15-000022eaf11f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.172.238.17/23/ecv/sccsq.hta","pattern":"[url:value = 'https://107.172.238.17/23/ecv/sccsq.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab763ef7-901e-740d-ce4d-0000bc5eef24","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/211/goodthingsforbestfeelingsarecomingformybest.hta","pattern":"[url:value = 'https://155.103.69.250/211/goodthingsforbestfeelingsarecomingformybest.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd2e8257-9ec1-f7ba-8561-000048e68a40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/222/goodthingswithbestmagicalthingscomingforme.hta","pattern":"[url:value = 'https://155.103.69.250/222/goodthingswithbestmagicalthingscomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6639e608-e0ee-a605-eb94-0000ad44c812","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/245/wemadebestthingsforthebestpeoplescomingfromthelife.hta","pattern":"[url:value = 'https://155.103.69.250/245/wemadebestthingsforthebestpeoplescomingfromthelife.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eebef295-1425-a070-84cf-000005fd22ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.172.238.16/42/image_picture_003202490905495093459034.jpg/bestthingswithbestthingswithbetterthings.hta","pattern":"[url:value = 'https://107.172.238.16/42/image_picture_003202490905495093459034.jpg/bestthingswithbestthingswithbetterthings.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4fc89e1-965c-6023-b748-0000021c62b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/223/nicepeopelscarecomngfrobestthingstobebestform.hta","pattern":"[url:value = 'https://155.103.69.250/223/nicepeopelscarecomngfrobestthingstobebestform.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a225761d-1218-e8cd-e068-0000d2e97f18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/46/weneedbesththingswithbetterplacecomingforme.hta","pattern":"[url:value = 'https://155.103.69.250/46/weneedbesththingswithbetterplacecomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfc15ace-c4a0-b20c-e578-0000c370b9a3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.172.238.16/8/ssn.exe","pattern":"[url:value = 'https://107.172.238.16/8/ssn.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60ea09c1-23be-d082-1bd1-0000f5060996","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.172.238.16/42/dmw.exe","pattern":"[url:value = 'https://107.172.238.16/42/dmw.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--035af30d-828e-db8a-0d7b-00004881dc6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.172.238.17/23/uks.exe","pattern":"[url:value = 'https://107.172.238.17/23/uks.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d1c438c-e07f-d15e-3978-0000d30ce7ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.238.16/42/dmw.exe","pattern":"[url:value = 'http://107.172.238.16/42/dmw.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--946ffcdb-01cf-35da-422f-000010ae4d93","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.238.16/8/ssn.exe","pattern":"[url:value = 'http://107.172.238.16/8/ssn.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6eacb940-a7f7-e4c3-abdd-00006e8b3232","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.238.17/23/uks.exe","pattern":"[url:value = 'http://107.172.238.17/23/uks.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e1001c7-87c7-0b6a-be29-0000643ae410","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/245/wemadebestthingsforthebestpeoplescomingfromthelife.hta","pattern":"[url:value = 'http://155.103.69.250/245/wemadebestthingsforthebestpeoplescomingfromthelife.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd85ee37-e407-6692-c818-0000887d1fcb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.37.102.150:54475/bin.sh","pattern":"[url:value = 'http://27.37.102.150:54475/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46d5b1f7-e2b6-d762-2de2-00004f9a991f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/img/img_220049.png","pattern":"[url:value = 'http://155.103.69.250/img/img_220049.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aedb0a7c-3d82-4b94-48af-0000427337e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://plain-wnam-prod-public.komododecks.com/202608/11/pfsGTK8iJLkOdtyVcP9U/image.png","pattern":"[url:value = 'https://plain-wnam-prod-public.komododecks.com/202608/11/pfsGTK8iJLkOdtyVcP9U/image.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f57c1ce-5b01-d981-08ae-000048a9dc23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/img/img_185156.png","pattern":"[url:value = 'http://155.103.69.250/img/img_185156.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25287666-f043-f834-a9a0-0000f4fc8493","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/img/img_005200.png","pattern":"[url:value = 'http://155.103.69.250/img/img_005200.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--976df81d-d31e-3695-d4cd-00000fee034a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://216.9.224.73/50/img_193544.png","pattern":"[url:value = 'http://216.9.224.73/50/img_193544.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd5094b-f32d-5b05-0475-0000afc2ba36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e87b93","pattern":"[url:value = 'http://5.182.210.174/e87b93']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ff3ef1e-a8e6-8a2a-ed09-00001f9c874e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a3cf9f","pattern":"[url:value = 'http://5.182.210.174/a3cf9f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75b50f18-37cb-e1b4-f383-0000dad0ecdf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6e9b28","pattern":"[url:value = 'http://5.182.210.174/6e9b28']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f7d3aba-06fd-de0e-4a50-000037a2edef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c15cf0","pattern":"[url:value = 'http://5.182.210.174/c15cf0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e28e6b8f-71ab-7cd1-5246-0000921605ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/285a62","pattern":"[url:value = 'http://5.182.210.174/285a62']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3803fe03-5b20-8e84-1380-0000e5066646","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/422255","pattern":"[url:value = 'http://5.182.210.174/422255']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7f41b9b-af16-5dff-5422-000016d6efc7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/539df1","pattern":"[url:value = 'http://5.182.210.174/539df1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43cb1d74-bc71-821b-7b3e-00005454f245","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e77c7d","pattern":"[url:value = 'http://5.182.210.174/e77c7d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f7e7906-5fce-dacc-316e-0000b9bba797","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3b1f5e","pattern":"[url:value = 'http://5.182.210.174/3b1f5e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f3e2eba-eaa7-2d12-8d6f-0000f6d92aa0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b848da","pattern":"[url:value = 'http://5.182.210.174/b848da']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78e17cbe-cff7-e978-45a8-00006f3172d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1a6fb8","pattern":"[url:value = 'http://5.182.210.174/1a6fb8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91241c83-3244-baa9-28c1-0000cd71596a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c76cc8","pattern":"[url:value = 'http://5.182.210.174/c76cc8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0776e216-a1c1-b95e-46ac-000039f3df0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/46/img_210045.png","pattern":"[url:value = 'https://155.103.69.250/46/img_210045.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f05c54c-ec27-b670-ed62-00004b11e601","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://192.255.195.150/img/1.jpg","pattern":"[url:value = 'https://192.255.195.150/img/1.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1542814-61dd-8262-4179-0000de027594","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.173.9.104/img/2.jpg","pattern":"[url:value = 'https://107.173.9.104/img/2.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b9d963c-7b8a-788c-6839-000070a29ba4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://107.172.172.216/125/img_000358.png","pattern":"[url:value = 'https://107.172.172.216/125/img_000358.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84b9d93d-af8a-9b35-7c4a-00003a824697","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://216.9.224.73/33/img_190847.png","pattern":"[url:value = 'https://216.9.224.73/33/img_190847.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35c62409-0283-82f2-07c5-00007848f837","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://192.255.195.158/img/1.jpg","pattern":"[url:value = 'https://192.255.195.158/img/1.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23d3e94e-3dbc-6bb6-94de-00001e142e8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://plain-wnam-prod-public.komododecks.com/202608/11/pfsGTK8iJLkOdtyVcP9U/image.png","pattern":"[url:value = 'http://plain-wnam-prod-public.komododecks.com/202608/11/pfsGTK8iJLkOdtyVcP9U/image.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c613eac-9cf5-c03b-23f1-00005f64ab55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://plain-wnam-prod-public.komododecks.com/202608/09/xQah941ojbxnpRQKa4zi/image.png","pattern":"[url:value = 'http://plain-wnam-prod-public.komododecks.com/202608/09/xQah941ojbxnpRQKa4zi/image.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5a2c295-734a-c8d6-99e2-0000ceba4868","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/img/img_005200.png","pattern":"[url:value = 'https://155.103.69.250/img/img_005200.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2bdc634-86d9-1d1d-a854-0000ff64b7b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://216.9.224.73/50/img_193544.png","pattern":"[url:value = 'https://216.9.224.73/50/img_193544.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fdd753d-c30e-438a-542b-000072ef10d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/img/img_185156.png","pattern":"[url:value = 'https://155.103.69.250/img/img_185156.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b65f0504-58b7-2399-68f9-000075dc55e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/img/img_220049.png","pattern":"[url:value = 'https://155.103.69.250/img/img_220049.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cde94570-49af-19f9-4500-0000f45fccaf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/44/ecw/wennedsometingbetterfeaturesfrom.js","pattern":"[url:value = 'http://155.103.69.250/44/ecw/wennedsometingbetterfeaturesfrom.js']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5f032ce-5106-87bf-f901-00003f8a583c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/44/ecw/wennedsometingbetterfeaturesfrom.js","pattern":"[url:value = 'https://155.103.69.250/44/ecw/wennedsometingbetterfeaturesfrom.js']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98afc71b-973b-73a0-6357-000026d7f657","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://res.cloudinary.com/oytyusbd/image/upload/v1786408317/img_203143.jpg","pattern":"[url:value = 'https://res.cloudinary.com/oytyusbd/image/upload/v1786408317/img_203143.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e107387-4b07-6dca-3222-000009a972a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.25.51:39898/bin.sh","pattern":"[url:value = 'http://42.230.25.51:39898/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b05bae1-3d3a-67e5-9fb5-000032164d9f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.25.51:39898/i","pattern":"[url:value = 'http://42.230.25.51:39898/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23e36a42-a35c-5f49-5ce5-000021792ccc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://193.104.58.65/yurumpmonday.png","pattern":"[url:value = 'http://193.104.58.65/yurumpmonday.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0d10380-83cd-56c2-ef32-0000cfbaef1f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.108/Mistakeful.pfb","pattern":"[url:value = 'http://185.29.9.108/Mistakeful.pfb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c07fda5-0d83-0df3-bff9-000014b3d00a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.108/HcesVRijHtJscyGevVVH35.bin","pattern":"[url:value = 'http://185.29.9.108/HcesVRijHtJscyGevVVH35.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69c28593-34dd-b9f9-0654-000038bd8cfc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.108/nVgXuGSv49.bin","pattern":"[url:value = 'http://185.29.9.108/nVgXuGSv49.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae950140-2f47-1c01-eb55-00001d929e4a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.37.102.150:54475/i","pattern":"[url:value = 'http://27.37.102.150:54475/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc0b016c-aeee-0bcf-b5a2-00003b729fef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.101/nHxFirwKSyH79.bin","pattern":"[url:value = 'http://185.29.9.101/nHxFirwKSyH79.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee15b951-e7e1-ab18-47f5-0000c1d2f0dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.101/pOuBKgVzyeBCT11.bin","pattern":"[url:value = 'http://185.29.9.101/pOuBKgVzyeBCT11.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2638337-0358-2941-0b24-000011474d03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.101/Standardpakke.toc","pattern":"[url:value = 'http://185.29.9.101/Standardpakke.toc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6b0612c-f9a3-8420-7f5b-000072a613e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.101/vSmLoKx110.bin","pattern":"[url:value = 'http://185.29.9.101/vSmLoKx110.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c07b7e22-cc79-24ef-0588-0000b9d42b2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.101/MnuuOvukjaufYr227.bin","pattern":"[url:value = 'http://185.29.9.101/MnuuOvukjaufYr227.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ffacd72-988f-1fe5-c6e5-0000803f4b9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://wp.ameyiando.com:8888/web/office365com.dat","pattern":"[url:value = 'http://wp.ameyiando.com:8888/web/office365com.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d51652fa-512d-9e5b-bfd0-0000307c39fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://suavasua.vn/wp-includes/Text/fxuqicg/qvbudog/bstwneo/vv/cryptted.ps1","pattern":"[url:value = 'https://suavasua.vn/wp-includes/Text/fxuqicg/qvbudog/bstwneo/vv/cryptted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ab9b70c-22f3-6c57-db3a-0000e4558fc7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/LHWEk","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/LHWEk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de284457-8114-9a1e-d966-00003c255fbe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/pin.png","pattern":"[url:value = 'https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/pin.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbc86f1f-771c-6c8a-117c-000094d69cd2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/img_164159.png","pattern":"[url:value = 'https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/img_164159.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fec23381-956f-9511-dab0-00009580f24b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-45a83f302a1943ed8d62418c2af947ef.r2.dev/rdfg.png","pattern":"[url:value = 'https://pub-45a83f302a1943ed8d62418c2af947ef.r2.dev/rdfg.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f385cacc-62bd-db25-3546-0000c0046212","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/jyvna","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/jyvna']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e455f7d-2d74-9bd3-df5f-000093ca4a67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/akocrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/akocrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54d38186-abe6-aa1f-bd88-00002c8c08ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.172.172.254/22/goodthingswithbestwayforbetterplacescomingforme.hta","pattern":"[url:value = 'http://107.172.172.254/22/goodthingswithbestwayforbetterplacescomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f038dbea-ae84-5aa6-2ac0-00001acdb462","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.172.172.254/img/img_050827.png","pattern":"[url:value = 'http://107.172.172.254/img/img_050827.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be2c1f0a-6272-0520-7e8c-00000663a2bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://verdiva.life/admin/MSI_PRO.png","pattern":"[url:value = 'https://verdiva.life/admin/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d45e9804-9b5b-93cf-0401-0000c6349147","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://res.cloudinary.com/oytyusbd/image/upload/v1786407066/img_201045.jpg","pattern":"[url:value = 'https://res.cloudinary.com/oytyusbd/image/upload/v1786407066/img_201045.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49c4271a-d2d9-eadc-30ce-0000a30bd78d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://signageinsignia.co.za/kizzy/1.jpg","pattern":"[url:value = 'https://signageinsignia.co.za/kizzy/1.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83cc0c3c-675e-cbfe-1bff-0000e760984e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.204.221:40942/bin.sh","pattern":"[url:value = 'http://123.5.204.221:40942/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc0d135a-6e28-a1b8-847d-00008a03d33b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.204.221:40942/i","pattern":"[url:value = 'http://123.5.204.221:40942/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b734057-2a11-f3a0-7445-0000a4f01203","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.173.143.36/img/1.jpg","pattern":"[url:value = 'http://107.173.143.36/img/1.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aef0d699-9ea0-4e09-524e-00006c6b56fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.huttprimax.partners/caVqvkKZwjWiGLmJZfSINZX194.bin","pattern":"[url:value = 'https://www.huttprimax.partners/caVqvkKZwjWiGLmJZfSINZX194.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72e31a98-562f-ecd7-7ef0-00008e58e58d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://ubua.duckdns.org/update.exe","pattern":"[url:value = 'https://ubua.duckdns.org/update.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0376fc8-8a23-f2a3-b701-0000311250f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/kxYzN","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/kxYzN']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f3f5541-a619-3a3d-6e83-0000f484265a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.x86","pattern":"[url:value = 'http://36.255.97.21/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd09cb82-dd9b-9f28-dd39-000047153cdc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/x-3.2-.Sakura","pattern":"[url:value = 'http://23.251.34.31/x-3.2-.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f501b041-79d4-c60d-05d1-000016ec3c82","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.arm7","pattern":"[url:value = 'http://62.84.172.106/dlr.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3c41dca-9d92-4fda-305b-00000b2b3c4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/x-8.6-.Sakura","pattern":"[url:value = 'http://23.251.34.31/x-8.6-.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4c6d14a-ee16-14ff-35cc-0000635fde87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.x86","pattern":"[url:value = 'http://62.84.172.106/dlr.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8a1876d-6e6a-75f3-ff0f-0000616a8097","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/x86_64","pattern":"[url:value = 'http://64.118.132.61/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a50ffd0-5615-6f91-d343-000081b0dc42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/aarch64","pattern":"[url:value = 'http://64.118.132.61/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beeb5dcf-f907-c472-a0e0-000056488c84","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/arm","pattern":"[url:value = 'http://64.118.132.61/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61da7efe-b29a-2598-ad77-00009c9674a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/arm7","pattern":"[url:value = 'http://64.118.132.61/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cb5d61d-91f5-3e17-e563-00008ce1503b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/x86_32","pattern":"[url:value = 'http://64.118.132.61/x86_32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b33eac3-7daf-a76d-c292-00007cde179c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/x86","pattern":"[url:value = 'http://64.118.132.61/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f281de3-2f0c-dcd1-e014-0000950befde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/mpsl","pattern":"[url:value = 'http://94.154.43.97/bins/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02aa052f-8afa-3af2-b84d-00008c13fac2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/debug.dbg","pattern":"[url:value = 'http://94.154.43.97/bins/debug.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3fb6315-25b3-fe92-4d45-00008a243776","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/x86","pattern":"[url:value = 'http://94.154.43.97/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7985f100-9ec5-09ed-c104-00006403e284","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/arm6","pattern":"[url:value = 'http://94.154.43.97/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96d6effc-398e-85e6-a140-0000fefe574e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/m68k","pattern":"[url:value = 'http://94.154.43.97/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e5ba787-09a8-a6d2-4dea-00000df3eab7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/x86_64","pattern":"[url:value = 'http://94.154.43.97/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6218904d-9cb5-403b-1639-0000ee194913","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.arm7","pattern":"[url:value = 'http://36.255.97.21/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9aee2a5-cc9f-7e35-9214-000076e3c55d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/a-r.m-7.Sakura","pattern":"[url:value = 'http://23.251.34.31/a-r.m-7.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8968dd9-a153-6097-5cb5-0000e16f9bce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/Sakura.sh","pattern":"[url:value = 'http://23.251.34.31/Sakura.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9261dd1-4b9a-f722-3fde-0000555cf3a1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/bins.sh","pattern":"[url:value = 'http://64.118.132.61/bins.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfbad84c-2309-97b9-5770-0000efa32440","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.111/ohshit.sh","pattern":"[url:value = 'http://31.77.227.111/ohshit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3a461d7-542f-8456-ba57-0000d1ed5bcf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/jaws","pattern":"[url:value = 'http://36.255.97.21/jaws']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16d2bf2b-48a2-8c75-a66c-0000cbeeed36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/d","pattern":"[url:value = 'http://62.84.172.106/d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63e1975a-86c4-e6ad-9a7a-00007c502098","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/bins.sh","pattern":"[url:value = 'http://176.65.139.199/bins.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7da49dc-164e-1969-b72e-00003758468b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/0x83911d24Fx.sh","pattern":"[url:value = 'http://176.65.139.199/0x83911d24Fx.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--532284a9-1887-32a4-21c8-0000a8503fb9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/1.sh","pattern":"[url:value = 'http://181.214.136.12/1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04acb624-b47b-3099-0d8f-0000a6cd4d6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/t","pattern":"[url:value = 'http://93.114.194.171/t']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a350e9ab-2435-376e-cc74-0000c58ceedd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/sqpIQ","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/sqpIQ']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44cc947f-574d-f5ec-6f7d-00002c24ab02","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_arm","pattern":"[url:value = 'http://36.255.97.21/main_arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1142373-64e2-7802-344f-000006b2301a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_x86","pattern":"[url:value = 'http://36.255.97.21/main_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--564a32d0-011d-7232-d663-000002868c37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/mips","pattern":"[url:value = 'http://93.114.194.171/d/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bf84786-9bac-2a57-b797-00001d9081eb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/sh4","pattern":"[url:value = 'http://176.65.139.199/LjEZs/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99587d38-9976-7cfe-72f7-0000212f2f62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.ppc","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8ad7ecf-80e9-9359-ba81-0000775e1f56","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_i686","pattern":"[url:value = 'http://36.255.97.21/main_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ee0ace4-4ca8-8ef5-392b-0000f8252cc1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_spc","pattern":"[url:value = 'http://36.255.97.21/main_spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1780e14-001f-8542-797c-00002f049a43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/arc","pattern":"[url:value = 'http://176.65.139.199/LjEZs/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9920fbe9-ad17-d5b9-04f5-00009e63b6a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/arm6","pattern":"[url:value = 'http://176.65.139.199/LjEZs/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee27cb7f-e6d3-16ef-92e5-000026dfd1c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/arm7","pattern":"[url:value = 'http://176.65.139.199/LjEZs/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d53d1e6-cc53-ab0d-1536-000033581d31","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.x86_64","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--444f8b97-bcdb-928e-7833-0000323ef61e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_arm5","pattern":"[url:value = 'http://36.255.97.21/main_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbeb36ce-d3f9-5468-5ef2-0000d18354aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_mpsl","pattern":"[url:value = 'http://36.255.97.21/main_mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a374b978-b4d8-94a1-5263-0000ccfbdc31","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_arc","pattern":"[url:value = 'http://36.255.97.21/main_arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3215c4d1-b51f-43fe-7cff-0000ba76ec3a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_m68k","pattern":"[url:value = 'http://36.255.97.21/main_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd46da2d-28af-59f5-2295-0000208b59f0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_arm6","pattern":"[url:value = 'http://36.255.97.21/main_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9f4f0ea-c168-5bda-4662-0000fe6fc799","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_sh4","pattern":"[url:value = 'http://36.255.97.21/main_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f564bff5-cb87-9038-c9ce-00006efbe356","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.sparc","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3504e23b-896e-90e0-755a-0000b76d1a9d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/a-r.m-6.Sakura","pattern":"[url:value = 'http://23.251.34.31/a-r.m-6.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2132e699-5627-c3c3-d5dc-0000c647c31a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/x86_64","pattern":"[url:value = 'http://176.65.139.199/LjEZs/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a3db999-e05b-5cda-3191-00006bdb9f4b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.111/hiddenbin/boatnet.i686","pattern":"[url:value = 'http://31.77.227.111/hiddenbin/boatnet.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecec1b88-0b1a-bb73-3b31-00001bda6ab3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/spc","pattern":"[url:value = 'http://176.65.139.199/LjEZs/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00826d7e-b7b4-9c36-0755-000079fcf712","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.111/hiddenbin/boatnet.i468","pattern":"[url:value = 'http://31.77.227.111/hiddenbin/boatnet.i468']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26c02313-af72-7cb9-9b07-0000cfdbed70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/arm","pattern":"[url:value = 'http://176.65.139.199/LjEZs/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c318941f-b92c-4439-2f87-0000e54d7668","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/x86","pattern":"[url:value = 'http://176.65.139.199/LjEZs/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7673e515-3070-2016-509c-0000049e036c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/m68k","pattern":"[url:value = 'http://176.65.139.199/LjEZs/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa41eabb-0e40-1859-c7f0-000098373e95","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_arm7","pattern":"[url:value = 'http://36.255.97.21/main_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d156fc35-e41c-b60a-ef52-0000ecd73874","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/m-i.p-s.Sakura","pattern":"[url:value = 'http://23.251.34.31/m-i.p-s.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7721e546-0ab9-3fb4-7b02-0000ef01a35c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/a-r.m-4.Sakura","pattern":"[url:value = 'http://23.251.34.31/a-r.m-4.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f8d170a-3b4a-49e9-c03b-00006f6bbbfc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/mpsl","pattern":"[url:value = 'http://176.65.139.199/LjEZs/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afd24d11-5290-2c22-b506-0000c4980ef6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.m68k","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4ea4cf6-0a9e-34db-ceec-0000592c4117","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.x86","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3786637b-b0ed-62da-3891-0000e6d9dc59","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.arm7","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a5fd1c3-d5f5-bb00-0d40-00000468d5b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/mips","pattern":"[url:value = 'http://176.65.139.199/LjEZs/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd893234-91af-d532-75fa-0000ae0067da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/p-p.c-.Sakura","pattern":"[url:value = 'http://23.251.34.31/p-p.c-.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd8a5482-0c1f-c56a-14a7-0000c57d7893","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/m-6.8-k.Sakura","pattern":"[url:value = 'http://23.251.34.31/m-6.8-k.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eeaaa5d1-bd0a-c1fb-4c54-00009d4e181d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/ppc","pattern":"[url:value = 'http://176.65.139.199/LjEZs/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0029aa53-8b15-02bd-69e4-00008cd61948","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/arm5","pattern":"[url:value = 'http://176.65.139.199/LjEZs/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e4bb3dc-d24e-4bf4-036a-00005e03ec97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/m-p.s-l.Sakura","pattern":"[url:value = 'http://23.251.34.31/m-p.s-l.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d9bef7e-53e5-b16d-696e-00001422a506","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/i-5.8-6.Sakura","pattern":"[url:value = 'http://23.251.34.31/i-5.8-6.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5132fbfa-bd31-e994-be06-000073bada0f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.arm","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec0a9f6f-7bed-e3b8-b365-0000a1f1b694","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.sh4","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9880257-a2e7-0824-9265-00004cd014d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.arm5","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e39f007-7575-019b-71c7-0000ba803ae0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_mips","pattern":"[url:value = 'http://36.255.97.21/main_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b68ad6fd-499b-23dc-48da-00009365ad3c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.arc","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--562cbf0e-50de-83ea-f00a-0000af6db666","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.mpsl","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ca612bd-01b5-798d-8bb6-00007eb15e6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_ppc","pattern":"[url:value = 'http://36.255.97.21/main_ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b2cdfba-5a89-4616-a88b-000008c78b70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.111/hiddenbin/boatnet.x86_64","pattern":"[url:value = 'http://31.77.227.111/hiddenbin/boatnet.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3fe79c7-d1c9-d9fc-4a2b-0000c46ed82c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.mips","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--408153ed-7f35-272b-4ac4-00005e65bb3c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.arm6","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--724557cb-9077-b2f1-040c-00009ac042f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/s-h.4-.Sakura","pattern":"[url:value = 'http://23.251.34.31/s-h.4-.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e398f419-8010-6115-9c03-00006985e27d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/mpsl","pattern":"[url:value = 'http://93.114.194.171/d/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44131cd0-3cf1-b6f5-6cee-00001b366c59","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.mips64","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb8be5d8-3596-3c0f-ac4d-00002e8f7c9c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/a-r.m-5.Sakura","pattern":"[url:value = 'http://23.251.34.31/a-r.m-5.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--356af70f-069c-16f3-2d01-000009b0fd9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.i686","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b1ec361-8ebf-5891-7732-0000a7bb5dcc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.spc","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--550ccc5d-c78f-ff48-7474-0000feeb2c71","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/debug_main.exe","pattern":"[url:value = 'http://94.154.43.97/bins/debug_main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bccb8182-c1ba-cc75-d2da-000038e938ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/main.exe","pattern":"[url:value = 'http://94.154.43.97/bins/main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b19bf91e-95d1-b6ff-6e35-0000406ddb5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/arc","pattern":"[url:value = 'http://94.154.43.97/bins/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e4952db-4f1d-530e-85ca-0000f2275903","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/ppc","pattern":"[url:value = 'http://94.154.43.97/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb1bb08c-cc4e-f8d4-1056-000072f9c0f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/sh4","pattern":"[url:value = 'http://94.154.43.97/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dafadb2a-8e2e-948a-0a39-0000fe088194","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/mips","pattern":"[url:value = 'http://94.154.43.97/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e82c196-7739-4e4c-5672-0000dcbf85e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/arm7","pattern":"[url:value = 'http://94.154.43.97/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9db2f918-9612-3980-b158-000006523faf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/x86_64nosl","pattern":"[url:value = 'http://94.154.43.97/bins/x86_64nosl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5623d419-8e4e-19b7-3dee-0000a0b2ac6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/arm","pattern":"[url:value = 'http://94.154.43.97/bins/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e08ca0ba-ffc6-0b75-b604-000076b64d6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/arm5","pattern":"[url:value = 'http://94.154.43.97/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c0fec82-4c92-d9e4-c13f-000074b32bad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/spc","pattern":"[url:value = 'http://94.154.43.97/bins/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8971b02d-ac4b-8dd5-3788-000007247f86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/arm6","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fdc5cce-9fd7-e1ab-54a0-0000f62c72dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/mpsl","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6faa7c9a-f748-c8f1-8dec-0000b17b04eb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/x86_64","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a0e9a07-8914-3596-41fc-00009d2f1c96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/mips","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe7680bb-4d95-611f-3ee2-0000bf9818e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/arm7","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--659b3b4b-7e4d-9d37-eb58-0000d3d6821e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/ppc","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10c9d91c-3ece-5c15-5a8c-000053081be8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/sh4","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48290a85-6c73-32a1-4d9a-0000abd5ec6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/x86","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a49908e-848c-dd67-382f-0000619c0040","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/arc","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fee4ecd-6ecb-0559-0aae-00004449ed36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/HTTP/kk2crypted.ps1","pattern":"[url:value = 'http://178.16.53.176/HTTP/kk2crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11f86b9d-f0cd-cf3e-ae44-000034d2a65e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://213.66.220.87:50871/bin.sh","pattern":"[url:value = 'http://213.66.220.87:50871/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0057b9bd-2369-6193-f6d3-0000f9f8f94b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.110:33070/i","pattern":"[url:value = 'http://196.189.98.110:33070/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8b6690b-c501-da9e-ef8f-00006e1e6cf0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.106.64:52025/i","pattern":"[url:value = 'http://182.121.106.64:52025/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d43b7cc0-3b1c-0bf0-e16c-000057580ce4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/exploit.sh","pattern":"[url:value = 'http://voltagec2.tech/exploit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e94c6ad0-9084-cfac-2cf1-00009987fee1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.21.31.81:59239/bin.sh","pattern":"[url:value = 'http://27.21.31.81:59239/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f1885cf-ff92-1aba-325f-00003b1d6094","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.233.65.130:37441/bin.sh","pattern":"[url:value = 'http://113.233.65.130:37441/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c25674c8-3cc6-b569-f64c-0000a291caa7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/arm","pattern":"[url:value = 'http://voltagec2.tech/release/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6cdbeec-9ddc-cad4-fa1c-0000cb1d5187","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://37.52.247.235:47637/i","pattern":"[url:value = 'http://37.52.247.235:47637/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51b933b9-c4f6-627e-b4e3-0000782fee78","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.50.235:56719/i","pattern":"[url:value = 'http://115.63.50.235:56719/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74fb5c99-1d7a-6487-616f-00003ad5ff69","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://140.237.36.213:34302/bin.sh","pattern":"[url:value = 'http://140.237.36.213:34302/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5539eee7-cf94-065c-0251-0000c723d5b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.116.39.158:45878/bin.sh","pattern":"[url:value = 'http://119.116.39.158:45878/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1057b5db-ea5f-7df7-facb-0000191701c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.106.220:47631/i","pattern":"[url:value = 'http://110.37.106.220:47631/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--050b58cc-0dba-01f2-cef5-00008973245b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.226.101:43998/i","pattern":"[url:value = 'http://125.41.226.101:43998/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c678046-0375-5e75-2ad3-00006834d810","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.54.158.77:42338/i","pattern":"[url:value = 'http://42.54.158.77:42338/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2011b9e3-4f6a-66b8-9a5d-000000651e74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://213.66.220.87:50871/i","pattern":"[url:value = 'http://213.66.220.87:50871/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--228c8606-1394-9916-0160-0000792cc9f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/HTTP/K1crypted.ps1","pattern":"[url:value = 'http://178.16.53.176/HTTP/K1crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70ee3726-9247-0b6b-8048-00001f0310c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.40.158.110:41707/i","pattern":"[url:value = 'http://125.40.158.110:41707/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52a6c733-cd64-0835-dc7e-000069555961","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/main.exe","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9bacbe6-3e99-049d-79c8-00005aa3bd52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://140.237.6.238:41787/bin.sh","pattern":"[url:value = 'http://140.237.6.238:41787/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa6b592a-865c-7060-f848-000070b5d8af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.159.152:47624/i","pattern":"[url:value = 'http://115.56.159.152:47624/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68012ea4-679a-2293-cccb-0000560789c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.44.201:48800/i","pattern":"[url:value = 'http://125.43.44.201:48800/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f6e105d-2571-ea34-7d36-000070daa63c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/sh4","pattern":"[url:value = 'http://voltagec2.tech/release/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88c566e2-95eb-8cd3-eff8-000086b9bbf6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/arm6","pattern":"[url:value = 'http://voltagec2.tech/release/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa3af1b9-bb94-1a9e-a69d-0000f55289d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.106.68:36906/bin.sh","pattern":"[url:value = 'http://210.208.106.68:36906/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e61c3aad-c4dc-fa07-8172-0000147e094d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.165.236.61:47227/i","pattern":"[url:value = 'http://175.165.236.61:47227/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af22df9e-912c-0595-e69f-0000d03b48cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.90.59:40206/bin.sh","pattern":"[url:value = 'http://123.8.90.59:40206/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--553b6ac6-9f1c-4028-a6f5-00004f4dc500","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.95.214:33968/i","pattern":"[url:value = 'http://182.126.95.214:33968/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c151982f-edea-0380-b0f5-0000629325c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.246.222:57542/bin.sh","pattern":"[url:value = 'http://115.55.246.222:57542/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--268590dd-ff22-0374-a9af-00009db41e5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.44.220:42289/i","pattern":"[url:value = 'http://27.215.44.220:42289/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff3a50a4-c7d5-a586-d307-000056b0340b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.44.201:48800/bin.sh","pattern":"[url:value = 'http://125.43.44.201:48800/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11cc3758-8c7b-7bac-0128-0000940c1418","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/arm5","pattern":"[url:value = 'http://voltagec2.tech/release/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8adeaca6-e981-8bb5-f11a-00004a5a68c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.189.160.169:47495/bin.sh","pattern":"[url:value = 'http://119.189.160.169:47495/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cb88cd7-d413-6ddb-db14-00002e3c8a8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://1.20.91.236:53593/bin.sh","pattern":"[url:value = 'http://1.20.91.236:53593/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc1dc98c-b2f7-770f-7d52-00006567a768","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.172:59880/i","pattern":"[url:value = 'http://210.208.110.172:59880/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1691f2de-37a3-eaaa-8c62-0000d2e37d6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.176.120.191:54769/i","pattern":"[url:value = 'http://42.176.120.191:54769/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c130d3c-4e28-0a3d-3ae0-0000e81766a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.92.80.153:35984/bin.sh","pattern":"[url:value = 'http://124.92.80.153:35984/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2669e59b-ab31-35b2-b1c0-00001257cccc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.116.39.158:45878/i","pattern":"[url:value = 'http://119.116.39.158:45878/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d218e0e-704a-602d-f99d-00001781cd12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.1.226.175:38386/i","pattern":"[url:value = 'http://221.1.226.175:38386/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7211825-c4b8-6f98-2cf3-000004824905","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.202.17.138:38962/i","pattern":"[url:value = 'http://221.202.17.138:38962/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdbb363a-bf6a-e001-6485-00000825de54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.233.65.130:37441/i","pattern":"[url:value = 'http://113.233.65.130:37441/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--564626d9-72e9-9701-e367-00002a4f2cc6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.175.231:41660/i","pattern":"[url:value = 'http://42.224.175.231:41660/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8fcd748-ecae-378b-67fb-0000f08d74e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://222.127.220.233:54104/i","pattern":"[url:value = 'http://222.127.220.233:54104/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f01c48b9-c93e-9488-59f4-000012581983","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.106.64:52025/bin.sh","pattern":"[url:value = 'http://182.121.106.64:52025/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f15bd153-3a59-6538-7c76-0000fe16a994","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.214.37:48901/i","pattern":"[url:value = 'http://222.137.214.37:48901/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--589f9578-eae5-8ba7-c35d-0000c2128c94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.180.66.105:43207/i","pattern":"[url:value = 'http://42.180.66.105:43207/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f875f76d-f6c8-1f0a-4395-0000cfebefec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.213.21:46712/bin.sh","pattern":"[url:value = 'http://120.84.213.21:46712/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4fe5efd-fedf-03aa-e314-000037570a28","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.40.119:58107/i","pattern":"[url:value = 'http://42.230.40.119:58107/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c646ef3-97e5-3150-3891-0000f2556b63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.180.159:41148/i","pattern":"[url:value = 'http://182.121.180.159:41148/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93340659-b236-0f5c-e43d-0000e0f50331","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.167.85.100:49899/i","pattern":"[url:value = 'http://175.167.85.100:49899/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce9d476a-4932-094e-4942-000080b03dad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.127.154.48:44547/i","pattern":"[url:value = 'http://222.127.154.48:44547/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33995c16-044e-c776-2136-00007300a3e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.219.14:47408/i","pattern":"[url:value = 'http://125.44.219.14:47408/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--453258ea-16b4-b096-01cb-0000eab69641","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.172:59880/bin.sh","pattern":"[url:value = 'http://210.208.110.172:59880/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d7fd00e-bece-591d-5b72-0000bf6ac12b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/x86_64","pattern":"[url:value = 'http://64.118.132.61/release/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44829d46-cb17-c5c8-57c5-00004738a2c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://193.23.118.161/duza","pattern":"[url:value = 'http://193.23.118.161/duza']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1f7b297-2989-799e-d13c-0000f90040ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/x86","pattern":"[url:value = 'http://64.118.132.61/release/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5541a0a-cad9-ef34-28e0-000025caafab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.52.185:33904/i","pattern":"[url:value = 'http://42.237.52.185:33904/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0133601c-aadb-f93b-cb57-00003b67150a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.159.152:47624/bin.sh","pattern":"[url:value = 'http://115.56.159.152:47624/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--269ca263-3e5d-81b7-7f81-0000db6f31f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.107.232:46123/bin.sh","pattern":"[url:value = 'http://125.43.107.232:46123/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9c3ebcf-c0b2-b3f4-45df-0000d1622d07","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.106.68:36906/i","pattern":"[url:value = 'http://210.208.106.68:36906/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c524c5a4-b5d3-a670-a3f2-0000a089770d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.238.30:45449/bin.sh","pattern":"[url:value = 'http://112.198.238.30:45449/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95720121-b696-6336-bf70-00006ae948bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/m68k","pattern":"[url:value = 'http://64.118.132.61/release/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39197310-2901-9dd9-e8f2-000088296412","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/debug_main.exe","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/debug_main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3befa047-aeae-1671-53f3-00001f119dd0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.90.59:40206/i","pattern":"[url:value = 'http://123.8.90.59:40206/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd87480d-4f6a-9cf5-30df-0000b7d205be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.147:33487/bin.sh","pattern":"[url:value = 'http://210.208.110.147:33487/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3469a2a-dda8-ae6b-5b2f-0000d5bd001e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.254.223:44858/i","pattern":"[url:value = 'http://119.179.254.223:44858/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39963611-50ff-29f8-7cf1-000079e22bd4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.21.31.81:59239/i","pattern":"[url:value = 'http://27.21.31.81:59239/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cda29b1-82f6-b224-bfd5-000012aa7594","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://86.98.154.146:19091/i","pattern":"[url:value = 'http://86.98.154.146:19091/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d2c9a8a-00d4-7e93-b58f-0000a1a2d596","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.40.119:58107/bin.sh","pattern":"[url:value = 'http://42.230.40.119:58107/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ec4cb60-ca6c-77d2-b5e8-000008a686dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.234:49323/i","pattern":"[url:value = 'http://210.208.111.234:49323/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2213f1b-8d2c-f8e5-9206-0000f0b233bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.114.109:46437/i","pattern":"[url:value = 'http://115.49.114.109:46437/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed9cff28-9a16-0d62-14e8-0000a8b57006","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.154.181.58:50132/i","pattern":"[url:value = 'http://219.154.181.58:50132/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a22ca06-2918-85fe-13a1-0000148e4716","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.203.62.97:34952/bin.sh","pattern":"[url:value = 'http://115.203.62.97:34952/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4b37db2-6753-9b67-44f6-0000fa558af9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/tvt/i586","pattern":"[url:value = 'http://205.237.110.232/tvt/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c209735-e9b1-e311-a9c1-0000d3b85eec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.146.164:54323/i","pattern":"[url:value = 'http://61.52.146.164:54323/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2d3e39a-eb5f-3a74-4b8e-00006e7b5b1b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.202.17.138:38962/bin.sh","pattern":"[url:value = 'http://221.202.17.138:38962/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a513dc3a-7262-be52-fd39-000074b9ee80","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.230.81.126:50462/i","pattern":"[url:value = 'http://113.230.81.126:50462/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2c38b62-8877-8f8a-7c0d-0000653f88b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.201.103:43353/bin.sh","pattern":"[url:value = 'http://182.113.201.103:43353/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88c9e380-4e9e-870e-1ba8-000082a8849d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.194.160:52311/i","pattern":"[url:value = 'http://120.28.194.160:52311/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1eb3c0f-a95d-ce28-6c46-0000bb01403d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.93.138.83:40373/bin.sh","pattern":"[url:value = 'http://112.93.138.83:40373/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fff05c94-468e-211d-be0a-0000a5dfb539","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.167.85.100:49899/bin.sh","pattern":"[url:value = 'http://175.167.85.100:49899/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3f8a84a-189a-590c-1afb-00005cc301c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.30.36:60566/i","pattern":"[url:value = 'http://123.12.30.36:60566/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0a96d6c-1259-1aca-e48e-0000cae279fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://222.127.220.233:54104/bin.sh","pattern":"[url:value = 'http://222.127.220.233:54104/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78af750e-2c79-95ba-9590-0000eac95b16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.193.241:34414/bin.sh","pattern":"[url:value = 'http://123.14.193.241:34414/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0aab946e-4048-2748-12ce-0000e21696f0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.228.216.110:54566/bin.sh","pattern":"[url:value = 'http://113.228.216.110:54566/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9aa14f7b-14f8-b07a-9a86-00007ae20231","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.137.197.66:51494/i","pattern":"[url:value = 'http://61.137.197.66:51494/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5e80354-b6c8-a858-d605-00001a3ffa8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.226.101:43998/bin.sh","pattern":"[url:value = 'http://125.41.226.101:43998/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d86c903e-76d9-0d4a-b6e5-0000efc62a85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/x86_32","pattern":"[url:value = 'http://voltagec2.tech/release/x86_32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3b4df57-576a-b2f9-f279-00005729d36d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.100:38107/bin.sh","pattern":"[url:value = 'http://210.208.111.100:38107/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7748cfe7-6697-a6e0-3823-00006cbe81df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.110:33070/bin.sh","pattern":"[url:value = 'http://196.189.98.110:33070/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d408dcec-e474-b588-74e3-000077d86e9f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.204.233.111:38853/i","pattern":"[url:value = 'http://27.204.233.111:38853/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--626ecaea-5253-e66c-9398-0000cb1c6321","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.54.158.77:42338/bin.sh","pattern":"[url:value = 'http://42.54.158.77:42338/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef56a46e-2c71-0711-e56f-0000fe5c2e47","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.40.36:42435/bin.sh","pattern":"[url:value = 'http://115.56.40.36:42435/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5b45b79-846b-4f5d-63f3-00003a15e58e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.120.131.65:54677/i","pattern":"[url:value = 'http://182.120.131.65:54677/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45a22d61-6876-5adc-8891-0000a5917cd7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/ppc440","pattern":"[url:value = 'http://voltagec2.tech/release/ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0654293c-7911-49c9-59ac-0000f147535a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://119.166.194.8:35798/i","pattern":"[url:value = 'http://119.166.194.8:35798/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9a1b6cd-cb62-c66b-6fc4-00007e4fda54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.86.172.171:41089/bin.sh","pattern":"[url:value = 'http://42.86.172.171:41089/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a3cf20a-4bad-d286-ede8-0000f0043fca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/ppc","pattern":"[url:value = 'http://voltagec2.tech/release/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dfc2a32-eecb-12e2-bbc7-000008f90662","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.42.71.239:58276/i","pattern":"[url:value = 'http://115.42.71.239:58276/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b7e8757-ac06-f219-9766-00005efa2f37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.75.164:57996/bin.sh","pattern":"[url:value = 'http://42.235.75.164:57996/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96566111-062b-83e6-8f8d-0000177c2258","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.80.60.21:60792/i","pattern":"[url:value = 'http://39.80.60.21:60792/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89f24ec9-f3f5-7930-fbaf-000057411953","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.234:49323/bin.sh","pattern":"[url:value = 'http://210.208.111.234:49323/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9fc73e6-aed3-93be-5288-0000e9007d07","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.246.222:57542/i","pattern":"[url:value = 'http://115.55.246.222:57542/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a1b7347-5def-cac3-d063-00000fd43d18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.249.174:41741/i","pattern":"[url:value = 'http://110.39.249.174:41741/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--664350df-6542-3791-8aa5-000027cd7abb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.126.58:44400/i","pattern":"[url:value = 'http://27.215.126.58:44400/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1ffb1ce-273d-7998-e444-0000bf9b8e61","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.215.125:39910/i","pattern":"[url:value = 'http://120.84.215.125:39910/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7a6be4e-810d-3275-d4b3-0000cb816038","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.174.78:56482/i","pattern":"[url:value = 'http://42.235.174.78:56482/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f49da18-7ad2-f3f2-2210-000092946398","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.147:33487/i","pattern":"[url:value = 'http://210.208.110.147:33487/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8b9ec94-0339-55a5-285b-00004e1ae2a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.173.78.13:52046/i","pattern":"[url:value = 'http://175.173.78.13:52046/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41f802dd-4534-4a96-04cf-0000f077fb20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.148.236.155:60439/bin.sh","pattern":"[url:value = 'http://115.148.236.155:60439/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9480f01c-60cf-972e-2be4-0000184e7db3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.148.236.155:60439/i","pattern":"[url:value = 'http://115.148.236.155:60439/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffd36c29-8f72-989c-dd9e-000015789ffb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/x86_64nosl","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/x86_64nosl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ceb2a5d-326d-83d9-1a34-0000c8a10ff9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/x86_64","pattern":"[url:value = 'http://voltagec2.tech/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b7ff20a-aafd-1077-b581-00001fd12fd1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.150.5:40794/i","pattern":"[url:value = 'http://115.50.150.5:40794/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4dd0327-f865-e5bd-30c6-00001a3be885","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.109.140.49:40757/bin.sh","pattern":"[url:value = 'http://119.109.140.49:40757/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c8cf33e-f75c-0667-cd15-0000011cf02d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/mpsl","pattern":"[url:value = 'http://64.118.132.61/release/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3284e67-95fe-6480-2281-0000e2a15299","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/arm5","pattern":"[url:value = 'http://64.118.132.61/release/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f9b0089-0ae3-56b8-d7b3-00007d4f2f52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.52.254:39042/i","pattern":"[url:value = 'http://219.157.52.254:39042/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be22eb73-711c-0aad-8e9e-0000ca2bf8da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/debug.dbg","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/debug.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a13f3a6-1c29-152c-9f91-000092ac9786","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://api.mineblack.lol/jaws","pattern":"[url:value = 'http://api.mineblack.lol/jaws']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3012f270-9eda-d7f0-2134-000075b4dfb9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.110.61.156:54807/i","pattern":"[url:value = 'http://125.110.61.156:54807/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6622aed1-63c0-acb7-28f4-00009dd9ca4c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/m68k","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06d2966a-2ccd-d222-a9b5-0000fef0953a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.198.5:48196/i","pattern":"[url:value = 'http://182.114.198.5:48196/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bba4cc8-99a8-a15a-791b-00001cb2d8e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/mips","pattern":"[url:value = 'http://voltagec2.tech/release/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc0cafcc-59bf-2798-7167-00004ceac67b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://116.149.19.3:33747/bin.sh","pattern":"[url:value = 'http://116.149.19.3:33747/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ad731f5-55e6-2de4-207c-00009993b42a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.249.174:41741/bin.sh","pattern":"[url:value = 'http://110.39.249.174:41741/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e365e46c-1a46-6661-8e52-0000b271d436","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.127.154.48:44547/bin.sh","pattern":"[url:value = 'http://222.127.154.48:44547/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d853336-e661-f30d-061b-0000bd29ce2e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.1.226.175:38386/bin.sh","pattern":"[url:value = 'http://221.1.226.175:38386/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f917610e-9575-6767-3081-000001ddb77c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/sh4","pattern":"[url:value = 'http://64.118.132.61/release/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e688a01-191f-b4f8-4012-000077b1b6ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/mpsl","pattern":"[url:value = 'http://voltagec2.tech/release/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8ff7b2d-c795-895d-41d8-0000252adf55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/x86_32","pattern":"[url:value = 'http://voltagec2.tech/x86_32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74e5000b-f1f1-26f8-3682-00002843bccc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.254.223:44858/bin.sh","pattern":"[url:value = 'http://119.179.254.223:44858/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e6e1165-246d-3783-50ec-000043b923a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/aarch64","pattern":"[url:value = 'http://64.118.132.61/release/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d8ab5a9-36a0-9dd2-6496-0000b600139f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.201.103:43353/i","pattern":"[url:value = 'http://182.113.201.103:43353/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--442f059b-ef85-54b5-50ca-0000d396dbe7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/arm","pattern":"[url:value = 'http://64.118.132.61/release/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf8bec14-f570-86b3-6409-000067f8a8f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://136.60.32.162:36863/bin.sh","pattern":"[url:value = 'http://136.60.32.162:36863/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83f895a9-7dee-c160-4491-00009d8f27b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.52.254:39042/bin.sh","pattern":"[url:value = 'http://219.157.52.254:39042/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84c242ab-70e1-6d5f-b86a-0000967e79b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.195.182:57009/bin.sh","pattern":"[url:value = 'http://182.114.195.182:57009/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c553a21d-fbeb-b7fa-83f1-00008edbab6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.149.86:37512/i","pattern":"[url:value = 'http://115.48.149.86:37512/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6fb9466-05be-aa7c-3e9c-0000876e9610","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.154.181.58:50132/bin.sh","pattern":"[url:value = 'http://219.154.181.58:50132/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34a53c21-93e3-70d5-9f33-000018b647d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/ppc440","pattern":"[url:value = 'http://64.118.132.61/release/ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83cf4569-725f-d27d-aef0-000035a5d1e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.110.61.156:54807/bin.sh","pattern":"[url:value = 'http://125.110.61.156:54807/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e933a64-a1e5-df7b-ec47-0000f7073aab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.44.220:42289/bin.sh","pattern":"[url:value = 'http://27.215.44.220:42289/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bfb37ce-2d72-ca07-3266-0000d52f757f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://43.252.159.78:57590/i","pattern":"[url:value = 'http://43.252.159.78:57590/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1292aebe-4c07-3e96-ac56-00001533f5a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://119.166.194.8:35798/bin.sh","pattern":"[url:value = 'http://119.166.194.8:35798/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3af54194-142d-f8e3-7a54-00002ad92d6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.187.193.166:37676/bin.sh","pattern":"[url:value = 'http://110.187.193.166:37676/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf2b67d0-e7c2-aa46-4d6d-0000ffff7471","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/bins.sh","pattern":"[url:value = 'http://voltagec2.tech/bins.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--278ec3c4-ee55-afb0-039d-0000880751bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/x86","pattern":"[url:value = 'http://voltagec2.tech/release/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c5d85d1-acb3-9e51-55d3-00002b135b92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/aarch64","pattern":"[url:value = 'http://voltagec2.tech/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28ea5f2f-91ed-6630-40f0-0000ba9b0ea6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/arm7","pattern":"[url:value = 'http://voltagec2.tech/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8c357e4-5c14-0704-67df-0000ad0a65b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/aarch64","pattern":"[url:value = 'http://voltagec2.tech/release/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfa8dd8c-4a34-3f2a-9468-0000f0c2370d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.43.20:36177/i","pattern":"[url:value = 'http://123.14.43.20:36177/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c7e9908-9cc1-7a53-aad7-0000ed5b7912","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://api.mineblack.lol/bot.x86","pattern":"[url:value = 'http://api.mineblack.lol/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab939a43-1b3e-36f5-1553-00006402d6f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/tvt/mipsel","pattern":"[url:value = 'http://205.237.110.232/tvt/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d95e35f7-3acb-f8e9-df4a-00006a1f9e67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/mips","pattern":"[url:value = 'http://64.118.132.61/release/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c78c14e-d688-903c-056d-0000024dfa29","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/x86_64","pattern":"[url:value = 'http://voltagec2.tech/release/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a211fdd-e872-6bbd-a9ef-0000f014fd77","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/arm6","pattern":"[url:value = 'http://64.118.132.61/release/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17e04f32-3927-8cdd-2cbf-00000472c5f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.192.208:40793/i","pattern":"[url:value = 'http://219.155.192.208:40793/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7a2b4c1-8b1e-5a83-cba7-0000dc6a1076","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.4.25.20:34409/i","pattern":"[url:value = 'http://42.4.25.20:34409/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e78dc129-15b6-ff03-2e09-0000820221b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/arm","pattern":"[url:value = 'http://voltagec2.tech/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02557625-a83d-79b8-5c50-0000a894baac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/x86","pattern":"[url:value = 'http://voltagec2.tech/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--285eeb8c-564f-b0fa-caf5-00002d00f1b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.52.204.44:32770/i","pattern":"[url:value = 'http://42.52.204.44:32770/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c476f817-db22-9d02-3a72-0000881c4f23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.4.25.20:34409/bin.sh","pattern":"[url:value = 'http://42.4.25.20:34409/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc77473b-eb1b-5bff-ab04-0000ad11727e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.204.233.111:38853/bin.sh","pattern":"[url:value = 'http://27.204.233.111:38853/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6796781e-f0a7-06e0-e436-00001c440e3c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/m68k","pattern":"[url:value = 'http://voltagec2.tech/release/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a96b817e-a70d-db15-2c94-000052e11187","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/x86_32","pattern":"[url:value = 'http://64.118.132.61/release/x86_32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d262f4b-af8a-315a-5d84-000048a89a12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/arm7","pattern":"[url:value = 'http://64.118.132.61/release/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d5b28b5-b3e4-90d0-8bb7-000096075fee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://api.mineblack.lol/bot.arm7","pattern":"[url:value = 'http://api.mineblack.lol/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c458359-45e2-2df4-7565-000081032e8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/ppc","pattern":"[url:value = 'http://64.118.132.61/release/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffc25674-e14e-00bf-c2fa-00003e05dc93","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/arm7","pattern":"[url:value = 'http://voltagec2.tech/release/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e105ba2d-977b-55cd-9d2d-0000aaa32241","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://121.5.26.199:9696/linux","pattern":"[url:value = 'http://121.5.26.199:9696/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cff95c4b-5fcf-a4ea-9093-00005ad67fa0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://orienttaxtile.com/tuess/crypted.ps1","pattern":"[url:value = 'https://orienttaxtile.com/tuess/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b6c70ca-9924-2ce7-21b7-0000037502d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://seniorsushi.com/PPK/RAWFILES.exe","pattern":"[url:value = 'https://seniorsushi.com/PPK/RAWFILES.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--393701fa-2d87-6886-a134-0000ed8327df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://rcf.co.mz/Volcano9.exe","pattern":"[url:value = 'https://rcf.co.mz/Volcano9.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49aae566-ee56-faac-8d6f-0000ad26bf2a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.35.172:40485/bin.sh","pattern":"[url:value = 'http://196.189.35.172:40485/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ebf63c4-4e7e-b6e7-99b2-000077deed15","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.35.172:40485/i","pattern":"[url:value = 'http://196.189.35.172:40485/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc00dd35-7337-c621-0e53-0000e240d94b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.178.118.193:52357/bin.sh","pattern":"[url:value = 'http://78.178.118.193:52357/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25586b37-3c88-3404-9775-000036ebdd34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.179.166:53602/bin.sh","pattern":"[url:value = 'http://182.121.179.166:53602/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c772fa8-8bac-9dcf-e734-0000ff6095a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/sh4","pattern":"[url:value = 'http://176.65.139.196/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb2d9d88-eb43-dff5-f0ee-00009a60a77f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/pmpsl","pattern":"[url:value = 'http://176.65.139.196/pmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67bf6573-8a48-531f-fcaf-0000e195a23f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/px86","pattern":"[url:value = 'http://176.65.139.196/px86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32d36f97-093d-476e-a33b-0000f1951fef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/pm68k","pattern":"[url:value = 'http://176.65.139.196/pm68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5925cdff-1ce0-22f7-c582-00007fbe0c5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/ppc","pattern":"[url:value = 'http://176.65.139.196/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7497fc31-9528-7834-7a03-000007bd622b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/x86","pattern":"[url:value = 'http://176.65.139.196/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a0d54bd-a7f0-a311-8f39-00009996cc4a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/pppc","pattern":"[url:value = 'http://176.65.139.196/pppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f5fb6ea-0823-48a1-8817-0000194855bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/psh4","pattern":"[url:value = 'http://176.65.139.196/psh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd80716b-c27e-43b8-6a75-00006b68aa25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/parm6","pattern":"[url:value = 'http://176.65.139.196/parm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17c83aad-d4b1-128d-dbb7-000095c01f71","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/px86","pattern":"[url:value = 'http://176.65.139.196/bins/px86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53c8e71b-104f-ef49-1e89-0000608526c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/pm68k","pattern":"[url:value = 'http://176.65.139.196/bins/pm68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb9cc971-6a8f-b751-93d6-000042c4f46a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/parm7","pattern":"[url:value = 'http://176.65.139.196/bins/parm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7eff5b41-a8c4-f478-5346-0000f163c935","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/pmips","pattern":"[url:value = 'http://176.65.139.196/pmips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8267d27f-d163-3465-4b40-0000cb033927","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/parm","pattern":"[url:value = 'http://176.65.139.196/parm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ce41a38-494f-6258-202c-0000c9442db0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/arm","pattern":"[url:value = 'http://176.65.139.196/bins/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc4828f4-1734-57eb-89cd-000063e1f976","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/arm5","pattern":"[url:value = 'http://176.65.139.196/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67297807-1676-f1e4-2e05-0000546d38de","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/kla.sh","pattern":"[url:value = 'http://176.65.139.196/kla.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8346ac84-0b8b-1a06-5c44-00008f47e131","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/kla.sh","pattern":"[url:value = 'http://176.65.139.196/bins/kla.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f28e934-5fc0-29a8-4f23-00006d1de8f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/psh4","pattern":"[url:value = 'http://176.65.139.196/bins/psh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31dc7ead-65a7-35ef-d9bf-00001b0f412b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/sh4","pattern":"[url:value = 'http://176.65.139.196/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35362690-f664-f5c9-e305-00000501ebd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/arm6","pattern":"[url:value = 'http://176.65.139.196/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa1267b2-07b5-82c4-fc0e-0000eba9e352","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/m68k","pattern":"[url:value = 'http://176.65.139.196/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa361504-cfbb-bb4c-a1e0-00000b709e55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/pmpsl","pattern":"[url:value = 'http://176.65.139.196/bins/pmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--914f4b3d-04e0-6535-483f-00002d2bf933","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/arm","pattern":"[url:value = 'http://176.65.139.196/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53ec95ad-5c95-850b-71c1-0000805c5bc2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/mpsl","pattern":"[url:value = 'http://176.65.139.196/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--324649d8-d311-53a0-4c26-0000c9e831fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/arm7","pattern":"[url:value = 'http://176.65.139.196/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42311606-25cb-2785-181b-0000bdbd8cb3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/arm7","pattern":"[url:value = 'http://176.65.139.196/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa8741fd-f10c-c0ef-be87-0000d3d4cd40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/parm7","pattern":"[url:value = 'http://176.65.139.196/parm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac3f772a-d1b7-cc9c-8951-000017b44438","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/arm5","pattern":"[url:value = 'http://176.65.139.196/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--693cad34-8ff1-dbad-63f4-0000e3d2b6a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/x86","pattern":"[url:value = 'http://176.65.139.196/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da65386c-c88a-a813-5757-00009ffc5e1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/m68k","pattern":"[url:value = 'http://176.65.139.196/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc9bf9e7-f80c-e249-650e-0000fa78930f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/parm6","pattern":"[url:value = 'http://176.65.139.196/bins/parm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e63e5364-3732-f435-c208-0000eb5f3588","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/mips","pattern":"[url:value = 'http://176.65.139.196/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2592a85d-6d23-55a4-aa0d-0000e8cd3ce1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/parm5","pattern":"[url:value = 'http://176.65.139.196/bins/parm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--448920d1-606a-d18e-e5b6-000079dd05cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/parm5","pattern":"[url:value = 'http://176.65.139.196/parm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a7a0b63-7194-dc18-1c06-0000edc37104","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/pppc","pattern":"[url:value = 'http://176.65.139.196/bins/pppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2108da1-77d9-cba6-a321-0000bf568469","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/parm","pattern":"[url:value = 'http://176.65.139.196/bins/parm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96490cba-6edc-2290-0a50-00009f0a88c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/mips","pattern":"[url:value = 'http://176.65.139.196/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fe4d3cd-f74b-61d4-caef-00006073f01f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/pmips","pattern":"[url:value = 'http://176.65.139.196/bins/pmips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4541794e-dbdc-091b-d12d-000071545698","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/arm6","pattern":"[url:value = 'http://176.65.139.196/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--448e9cfa-230a-94b7-defc-00009bd1d8dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/ppc","pattern":"[url:value = 'http://176.65.139.196/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--239bca73-9f7f-6104-a872-0000f409e68c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/mpsl","pattern":"[url:value = 'http://176.65.139.196/bins/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c9db60a-37a5-913c-44f3-0000c5c02623","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.178.118.193:52357/i","pattern":"[url:value = 'http://78.178.118.193:52357/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0ae2653-aff2-ac1d-09f6-0000683cd87c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b07d08f-586d-3e13-b33d-0000014349e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cad85dc3-d9f6-42c3-22d5-0000e0821482","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--153449b0-ae9d-75ed-3919-00003127bb52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://89.189.181.54:34451/bin.sh","pattern":"[url:value = 'http://89.189.181.54:34451/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f0a9b0a-8a68-ea2e-7934-00008b817ac8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aedf6783-a253-727a-e8d8-00002bd5d2fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fc80765-ed84-8ad7-9ed6-00006094903f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86f46915-a71e-6841-324e-0000e074c258","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c53cd915-7a46-53ae-e91d-0000910e2621","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66b5e141-3005-dd33-feed-000079402791","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69a777e9-05e4-58a8-887f-00007a897792","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49674a84-2dd8-68fa-b5e0-0000cb0aa5cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--277012fc-bb14-6b63-6874-00006059ced2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eba6d34e-9d7a-2b7a-5bac-00001bd2758e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79044b1d-3cf1-cffc-e0ad-0000f4682723","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7be8df69-1602-1237-3ee4-00001b0106e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a809f73-d4e3-ffb3-2e95-0000b9a08628","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a42031c-dcd1-ed24-d29a-000052b56cdf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b34600d7-6a3c-ad95-232b-0000e30f820d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--569eb7db-0bea-7a24-0381-0000c9991915","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cefefff-3b60-3466-c94f-0000a3bd6185","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13e70316-1c6d-6fe3-3551-0000f99ebe67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ef43119-1541-92dd-e5ac-00009b0cec78","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c4cd30b-26f2-2050-685b-00002d5c3134","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ea0477f-06af-cc75-c2d2-0000c23510f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95e6be45-885f-9735-c38e-0000b108ce6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1269adc-d4b2-1be2-f6f3-000029466e26","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3bcf103-3769-e331-1360-00003940d44f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af90c5d5-fc56-d65d-e1b2-000039b60295","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--180d1b45-4b9a-3699-d98b-000055a0bdba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be769a67-15f5-f7f8-4e34-00008b262e2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91a431a2-110b-6e84-db58-0000396cac72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb72316f-b4f1-c0a9-c9e6-0000cfabdeaa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb247830-9051-0d0f-780d-00000bf8b7da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93c4aba9-4bb4-e6a4-5b45-0000f3254059","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--addfdd8c-4a62-c051-a389-00003ea3d3f0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--761c1ca5-a330-8cca-6865-0000d9b3db41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54212f93-c4fa-c010-ee85-000055566b60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfddbfd7-8cf5-a9ab-ce38-0000e78f7aba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.74.53.25:55617/bin.sh","pattern":"[url:value = 'http://39.74.53.25:55617/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--375ad0a8-9166-8473-03c8-0000299b34b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc7501f9-9def-f061-92d0-00007717b9cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--227b60d5-4a63-933c-72d6-0000dd1e7144","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd1d41e3-9bd9-4ccb-4d79-0000d5b63907","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6034b279-c197-c15b-b529-000058112e9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--794c7000-2872-b58b-4e39-0000a423319a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb30a77c-4f2c-9e76-279e-00006e02cea3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce99958d-d59e-6aa6-f752-0000987e980c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--356044d6-62f4-596b-d9e0-0000a4d5e740","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1b0eeee-1637-406e-9eaf-00005c96d50b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9503d77-66ed-6748-52d5-0000a44b2288","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da335a2a-ddd7-4be4-9486-00003e28528a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc9eb6c9-7aa9-888d-06b5-0000cf205fd0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac5c2aa6-7852-4cbc-2563-00002435b527","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94e20cb9-9ab5-283b-f766-0000dc484cfd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c888a7b-2828-f499-5036-00008eddb990","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--433a0b90-2943-1158-3a27-00002c9dfd64","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad346abc-fd75-805a-e278-0000869435ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afd8fec8-1fbf-1836-e180-000069fd142c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1788505c-89cf-da9f-7718-0000c808c42b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b183114c-9cd9-df96-bbf6-0000aa9ec031","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb6aa504-84f4-624d-5fbc-00008d682d63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4477cbd8-51ad-a4e3-2bfb-00009183cb78","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1564c428-6f1c-bfbd-0f7f-00002761e5e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c11cde94-faa4-55e6-b417-000005d6e19d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--140c8432-c33b-612f-2c79-000085c06520","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74ce185d-1778-118f-0051-00006ed58fd7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d30ea42-80aa-1db5-00ee-000005203747","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--545ba640-b490-1de9-6e2f-000080085b29","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79e9978e-4b8b-3510-6525-0000f80b355c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cbb75d9-c481-d1c1-832f-000078d5acaa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--563b3c4b-240a-2e4c-e2ef-00004a41b702","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6263f4be-7fc2-b02b-c9dd-00009fdd828d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fad5a1f-e2b6-ef31-6b77-00000b3fcb17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.mips","pattern":"[url:value = 'http://176.65.139.234/rebirth.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcd27035-651a-dac4-5dce-00009134a807","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.arm6","pattern":"[url:value = 'http://176.65.139.234/rebirth.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c37d0cfc-719e-8ed3-1567-0000caa98d54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.ppc","pattern":"[url:value = 'http://176.65.139.234/rebirth.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b178a3e-4516-d8b6-ec1a-0000983c7839","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.arm","pattern":"[url:value = 'http://176.65.139.234/rebirth.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b62feeab-284c-518e-89bd-00004a7714a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.sh4","pattern":"[url:value = 'http://176.65.139.234/rebirth.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eecf3d32-094e-5ed8-c969-0000b2aae321","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.x86","pattern":"[url:value = 'http://176.65.139.234/rebirth.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84413fb4-9027-f2a2-975d-00006f2448dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/tplink.sh","pattern":"[url:value = 'http://176.65.139.234/tplink.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca7f9cd6-f73b-8e6f-c314-0000603ca55d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.mpsl","pattern":"[url:value = 'http://176.65.139.234/rebirth.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd540a3-0cfe-2504-b394-00002988cf62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.arm7","pattern":"[url:value = 'http://176.65.139.234/rebirth.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33816ec9-5281-5524-e1fc-00000bc91dcd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.m68k","pattern":"[url:value = 'http://176.65.139.234/rebirth.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45db218f-f756-393b-674e-0000838107e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.arm5","pattern":"[url:value = 'http://176.65.139.234/rebirth.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6d8d6c4-1b7e-d666-12b3-00003dba43bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/pmips","pattern":"[url:value = 'http://176.65.139.229/bins/pmips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--baf4e212-a3e9-7cd3-372d-00003d4c9561","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/pm68k","pattern":"[url:value = 'http://176.65.139.229/bins/pm68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--679c893c-6a9b-a725-a0e6-0000caffa550","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/pspc","pattern":"[url:value = 'http://176.65.139.229/bins/pspc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--486806ab-109d-1232-0b28-00003468b98b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/px86","pattern":"[url:value = 'http://176.65.139.229/bins/px86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--430a100d-4ec3-8662-293a-000056b92df1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/pmpsl","pattern":"[url:value = 'http://176.65.139.229/bins/pmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1088d532-f715-b4ee-d5df-0000ccb54e08","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/psh4","pattern":"[url:value = 'http://176.65.139.229/bins/psh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65da3765-6e6e-bdd5-d568-00004c6bd7fe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/pppc","pattern":"[url:value = 'http://176.65.139.229/bins/pppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55a7fcee-3f94-fefc-8c4c-0000a7b120ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/parm6","pattern":"[url:value = 'http://176.65.139.229/bins/parm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adb0b1a7-74bc-9a32-7e7f-00001efe2293","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/parm","pattern":"[url:value = 'http://176.65.139.229/bins/parm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22a0cc78-0809-75a2-4799-00001f0d47ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/parm7","pattern":"[url:value = 'http://176.65.139.229/bins/parm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccaead54-1301-00ca-1bf5-0000b5048f45","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/parm5","pattern":"[url:value = 'http://176.65.139.229/bins/parm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac5ba16c-4615-bbbf-85c4-0000fe1e7292","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.230/cat.sh","pattern":"[url:value = 'http://176.65.139.230/cat.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--626c3519-77ed-776e-6957-000001b432f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.230/telnet.sh","pattern":"[url:value = 'http://176.65.139.230/telnet.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--517b373a-884f-14b2-2f05-00008a5a2d39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.armv4l","pattern":"[url:value = 'http://176.65.139.226/iran.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58e56560-60b7-7b86-e8e3-0000744b07c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.i486","pattern":"[url:value = 'http://176.65.139.226/iran.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4860067b-6aeb-917b-6e3e-0000b73a0489","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.armv5l","pattern":"[url:value = 'http://176.65.139.226/iran.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c4a79f8-1ecb-94d3-10ac-000027550d7b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.sh4","pattern":"[url:value = 'http://176.65.139.226/iran.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--634d55b8-ffa0-cbf5-5e5e-0000f09a7e59","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.armv6l","pattern":"[url:value = 'http://176.65.139.226/iran.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a5664f9-baa9-5762-2382-0000cdfa57e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.armv7l","pattern":"[url:value = 'http://176.65.139.226/iran.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1d90b10-e98e-1af8-6c11-0000f4ab55a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.m68k","pattern":"[url:value = 'http://176.65.139.226/iran.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bf76a09-63a5-1f3e-d9ba-0000476c9aa8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.x86_64","pattern":"[url:value = 'http://176.65.139.226/iran.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d4fbca8-95b4-b8cc-6941-00008d0ef4be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/cat.sh","pattern":"[url:value = 'http://176.65.139.226/cat.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--117cb335-6557-49bd-81fb-0000408da2a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/telnet.sh","pattern":"[url:value = 'http://176.65.139.226/telnet.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--820d8425-f106-70bf-688e-0000ebaee0d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.sparc","pattern":"[url:value = 'http://176.65.139.226/iran.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9474e9d-bd1e-42f3-f502-000087ffd84c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.mipsrouter","pattern":"[url:value = 'http://176.65.139.226/iran.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6ca306a-7aec-ce1f-0a08-000015c116d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.arc","pattern":"[url:value = 'http://176.65.139.226/iran.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--102c0c7c-e076-1881-6395-000037f0f765","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.aarch64","pattern":"[url:value = 'http://176.65.139.226/iran.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--449920a8-b951-3cbf-d4d8-00003f4a4670","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.powerpc","pattern":"[url:value = 'http://176.65.139.226/iran.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8df53fc6-c967-c98d-05e0-0000f45d837e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.mips","pattern":"[url:value = 'http://176.65.139.226/iran.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3691706e-fd0b-692f-ef80-00001e087996","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.mipsel","pattern":"[url:value = 'http://176.65.139.226/iran.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51159c22-0247-ddb8-bbc2-00007f96f68c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.230/iran.aarch64","pattern":"[url:value = 'http://176.65.139.230/iran.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a5a9fed-dda9-a86c-d529-0000282b2878","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.230/iran.arc","pattern":"[url:value = 'http://176.65.139.230/iran.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bf5e34c-2baa-6824-4ede-00003572979d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.230/iran.i486","pattern":"[url:value = 'http://176.65.139.230/iran.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1281c011-bc9c-40d9-4d55-0000b8d7e803","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.179.166:53602/i","pattern":"[url:value = 'http://182.121.179.166:53602/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dec5c4fb-7105-b62f-1f0e-0000097ffd34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_809ebb7e1f93e6cb.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_809ebb7e1f93e6cb.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9d145ba-c9dd-83e1-d6f1-0000406567b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3bdfe634dff70206.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3bdfe634dff70206.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56913139-0019-7f3c-810b-00009e993f87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://suavasua.vn/wp-includes/Text/fxuqicg/qvbudog/bstwneo/oo/crypted.ps1","pattern":"[url:value = 'https://suavasua.vn/wp-includes/Text/fxuqicg/qvbudog/bstwneo/oo/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd6b2c4a-ce44-d09d-7ef6-00006a2a9e0b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://2goelectricity.co.za/MSI_213534.png","pattern":"[url:value = 'https://2goelectricity.co.za/MSI_213534.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--737476d2-56cf-5fb1-14c2-00005476cfd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.241.30/mb/crypted.ps1","pattern":"[url:value = 'http://217.60.241.30/mb/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03336b5d-f679-0d8b-9c40-0000a9cb2b34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8787254-5957-5869-5d5e-0000dc142150","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1186804b-f853-96ab-05c3-0000b7e199c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bcadee3-0388-0653-fd12-00003bd8e813","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72c0c84a-8862-c82b-113a-0000113cd23c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06ad4879-76e1-ecac-701e-00003f910c2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f27e0ef-6339-fb0a-a01d-0000adbc94cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.242/static/js/gpon","pattern":"[url:value = 'http://176.65.139.242/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a159310-59bb-fb99-e2dc-0000dfe1dbe6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33a738de-96c7-a56e-d27f-00002c4cd717","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/spc","pattern":"[url:value = 'http://94.154.43.97/LjEZs/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26810e4c-5692-5f24-a54f-000089caaf14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/check1.sh","pattern":"[url:value = 'http://176.65.139.211/check1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c55e9ec6-6e83-ed84-ff2f-0000024574fe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/check.sh","pattern":"[url:value = 'http://176.65.139.211/check.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d86b9dfc-0bbb-697b-153b-000056278345","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/auto1","pattern":"[url:value = 'http://176.65.139.211/auto1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49c2c114-64df-4b5f-7407-000048d20bd8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfa2d975-63b4-a2f5-ae93-0000ce6e5358","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva.sh","pattern":"[url:value = 'http://217.60.195.187/rva.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54ca5c95-55fd-4707-993d-000062110617","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.211/oldercheck.sh","pattern":"[url:value = 'http://176.65.139.211/oldercheck.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae7aec13-3e47-755d-b7c5-0000a80d7ceb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4faa581-f13b-75c3-9281-00009a996743","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2db610d1-75bb-bdfa-45b3-000010fd1e6c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac1a7618-0715-f8d6-06fc-0000624490c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db74e141-9bbb-a166-4470-00009523d50a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6953db11-1034-0844-1bd1-0000793c901a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bf7440b-3ec6-bf29-130c-00004fef47ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/arm6","pattern":"[url:value = 'http://94.154.43.97/LjEZs/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c53b749-96e2-a0f9-6505-0000d2dbcbcc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/x86","pattern":"[url:value = 'http://94.154.43.97/LjEZs/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d14f717e-9d67-3377-5c0e-00007a5e1493","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.243/static/js/gpon","pattern":"[url:value = 'http://176.65.139.243/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ad06ab9-068c-7c3b-5028-00002738d1c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/dddd.sh","pattern":"[url:value = 'http://217.60.195.187/dddd.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69dc56bf-2c77-ff43-43a8-000059f098c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/auto","pattern":"[url:value = 'http://176.65.139.211/auto']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0793a331-d219-4a91-42bd-00003df3e7da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/checkmacos.sh","pattern":"[url:value = 'http://176.65.139.211/checkmacos.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85b12e49-f3cd-0fea-243c-00003c5c7952","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e223d12-10a6-05e0-51ac-0000545c3b74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e4d9be0-0a43-7cdc-1d51-0000c74cfbac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3eac564d-ece0-28bd-0a69-0000bfb54e12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81a847d6-f0e3-ee76-3a79-00001a47feb5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8886e21-e020-1680-ce00-0000d5e424fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/mips","pattern":"[url:value = 'http://94.154.43.97/LjEZs/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ad70f7f-0298-a1ab-5e56-000034f43111","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31e18687-49cb-9e0a-5e95-0000aad8a5b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/ppc","pattern":"[url:value = 'http://94.154.43.97/LjEZs/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4bf416b-7008-8670-0812-00000248b182","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82fe15b1-c319-2200-4769-00005d5ae804","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/arm5","pattern":"[url:value = 'http://94.154.43.97/LjEZs/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17c06b41-f778-6d44-9813-00009843d292","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ccccc46-4e02-9b5b-f445-000075fca239","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c2d01eb-d695-0905-00ca-00000d051787","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4a45af7-7f48-1ae9-98f9-0000d512f220","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/m68k","pattern":"[url:value = 'http://94.154.43.97/LjEZs/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--131e6783-8e6a-3c08-1f71-0000c7b62067","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bbf4f65-f96d-cf6e-e409-00009655b1d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f98b0045-6b40-9504-f236-0000f84d50d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/arm","pattern":"[url:value = 'http://94.154.43.97/LjEZs/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cf0749d-e568-200e-4af8-0000f753208f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/arm7","pattern":"[url:value = 'http://94.154.43.97/LjEZs/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb952cec-d3b1-e5f5-e9ac-0000edda60b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3b871fd-187c-5862-30bf-0000baf4d6e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d39ca332-6d7d-c1aa-5241-0000af0a44c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/traff","pattern":"[url:value = 'http://176.65.139.211/traff']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--072b6ca8-7bcd-8012-6459-000046e9949a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73ffaa2e-87cd-bbc3-b80a-0000bf4f95d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c154e589-7833-d753-a4d5-0000559df724","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bec5f97-5b43-40ee-c44e-000098b50448","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d597cc0c-7e88-380c-f261-0000f44822ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/nvidia.sh","pattern":"[url:value = 'http://176.65.139.211/nvidia.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16a45b3d-120d-4ad6-9192-00005031d015","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/x86_64","pattern":"[url:value = 'http://94.154.43.97/LjEZs/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--664c85d4-c7d0-5c2e-85f9-00004768b991","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4544682-3f90-ccfd-2ac0-0000dce2f78a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d5aa8e8-59f4-d0a9-efbf-0000bee74ab0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/mpsl","pattern":"[url:value = 'http://94.154.43.97/LjEZs/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3eb610f-4eaa-97df-ea3c-0000b4146376","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44b364d0-df68-1ce5-3b6d-00002a063c4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/sh4","pattern":"[url:value = 'http://94.154.43.97/LjEZs/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e17f95a8-6647-33e3-1ab5-0000ef915b65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.211/loli","pattern":"[url:value = 'http://176.65.139.211/loli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56ef541d-834f-80b4-3b52-00000eea1262","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.241/static/js/gpon","pattern":"[url:value = 'http://176.65.139.241/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac5c1173-d838-4641-f7f9-000093c5adc4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://216.9.226.120/nuts/bolts","pattern":"[url:value = 'http://216.9.226.120/nuts/bolts']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6105def3-4ec8-863b-4d58-00002c259458","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/traffaarch","pattern":"[url:value = 'http://176.65.139.211/traffaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a63b0031-86ca-84bf-73fa-000060d4238b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71441c24-7b37-9a0c-6479-00005cf47337","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a212ad88-5aa9-4a0a-6464-0000f340bcd8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e332d42-aaed-b652-e66e-0000189227e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/arc","pattern":"[url:value = 'http://94.154.43.97/LjEZs/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--702c5c3e-9cba-29d9-eb0f-0000fe55f3ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfc755d9-ad59-2706-fbd2-0000b4e2b5ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cb87ff3-1dc9-eab4-a7c3-00002ee9d6bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25ec41b2-0479-b020-85b0-00007272bfe2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.237/static/js/gpon","pattern":"[url:value = 'http://176.65.139.237/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab062688-ca9b-77b8-6ab0-000031ed292c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.238/static/js/gpon","pattern":"[url:value = 'http://176.65.139.238/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a23c6e9-70df-4366-2c01-00006d82af21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/1","pattern":"[url:value = 'http://176.65.139.211/1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2d031e7-dda6-ee34-9328-00001855562f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39d24bb0-da07-d35e-3b24-00004a789eb1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://216.9.226.120/nuts/poop","pattern":"[url:value = 'http://216.9.226.120/nuts/poop']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d9f6898-230d-8857-edac-0000cae2c311","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.i468","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.i468']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5362f242-8ac7-d8e7-9ff2-0000025e9f18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.x86_64","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9466f47e-fba6-6aae-a829-00007e18e0b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.mpsl","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ce9269d-d3c1-c7c0-7695-00001bb5b799","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.211:3000/watcher-script-aarch","pattern":"[url:value = 'http://176.65.139.211:3000/watcher-script-aarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc862c46-6f4d-f23f-6bcd-0000bd8bf9ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.arm","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5cc280b-cc1d-eaaf-d0c9-000037ac8a8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.arm7","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d980661-0f58-3df2-080f-000015ed5824","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.m68k","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04ecaa84-21d0-4ded-4647-0000ef1e0cc6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.ppc","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d076c802-a900-0e63-85fa-00004db7185f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.236/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.236/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f720bc7f-19ae-e4ed-50dd-0000d8c5ab48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.i686","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d726ace7-d799-f22d-41b3-00008864f544","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.x86_64","pattern":"[url:value = 'http://217.60.195.187/boatnet.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82cb189d-f422-abfd-139d-00008f10edee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.arm6","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71be48d3-eb22-49e9-1fad-00006fc09530","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.sh4","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b3e0141-a7ce-450a-4d24-00005d548e98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.arc","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21b432b7-ea5d-61e7-df69-0000151b8efe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.mips","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06aa14dd-85e1-e2b4-8202-0000698a7e68","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.spc","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b04ebe21-b8a1-6f33-e813-000026db8668","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/main","pattern":"[url:value = 'http://176.65.139.211/main']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3198157f-4a6a-9aae-9321-000062ba9790","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/boss","pattern":"[url:value = 'http://176.65.139.211/boss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cca0c2f-7593-2302-8b40-0000106320ad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/cliaarch","pattern":"[url:value = 'http://176.65.139.211/cliaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a2e289c-5fc1-c94e-0f2e-000081f4a7c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/Error84","pattern":"[url:value = 'http://176.65.139.211/Error84']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e7c2075-3bc8-b00b-4346-00006a7bf68e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/cli","pattern":"[url:value = 'http://176.65.139.211/cli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--295e9b4a-14d1-3f89-b7d1-0000971d62b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.x86","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bc24927-9705-8dc6-f622-00009da54200","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.arm5","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3f9b45c-9087-b4e1-93c4-0000d518b38d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://alphalkenya.com/VSooNlFLuZpdMiw.exe","pattern":"[url:value = 'https://alphalkenya.com/VSooNlFLuZpdMiw.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7fcf339-331d-a6db-7532-00005456974f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.47.23:54371/bin.sh","pattern":"[url:value = 'http://125.44.47.23:54371/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c2d5273-5d81-cc1b-5fd4-00006f93f078","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.161.81:37957/bin.sh","pattern":"[url:value = 'http://115.56.161.81:37957/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42be4239-0dec-ee83-4b48-0000315a28ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.sh4","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff8626ac-7e59-f461-ebd7-0000e3114464","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.arm","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--183e0bab-0f68-3776-0149-000003ce3357","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.arc","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5202367-ce09-637c-0e47-00003c29cf17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.arm7","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c22713f1-0158-450e-a031-00008495a872","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.arm6","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3027a46-1d49-288d-1947-0000bbbf445f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva.sh","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d48aff12-c965-597e-71e3-0000759da528","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.mpsl","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b2e424b-1434-24fa-387f-00009620079c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.arm5","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35aa1e37-7f0a-f1c2-1585-00003710c3a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.spc","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d740d0d-f786-6d15-b661-00001e681db8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.m68k","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a5e91a0-2b87-ceec-3e22-0000c987df7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.x86","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b50cab0c-f965-28f7-4909-0000b9299576","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/dddd.sh","pattern":"[url:value = 'http://reavercncv4.duckdns.org/dddd.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37eca06e-66b9-a310-3237-0000b184b109","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.ppc","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--615839db-4775-876d-9d53-00001e9ecb62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.mips","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fc1f67c-2e10-e940-1bc1-000007186018","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://18.175.166.211:60101/linux","pattern":"[url:value = 'http://18.175.166.211:60101/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--838d77f4-c892-e27c-e524-0000b5cc8e8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://47.236.172.100:60117/linux","pattern":"[url:value = 'http://47.236.172.100:60117/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e764f176-0e09-8fa1-f403-0000e3722416","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.219.85.120:60142/linux","pattern":"[url:value = 'http://8.219.85.120:60142/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98818c07-fa71-46f4-4568-0000fcb03742","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://49.235.101.101:60147/linux","pattern":"[url:value = 'http://49.235.101.101:60147/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d1119fa-d3cf-1a1b-bcca-0000bd953a4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.236.146.147:60134/linux","pattern":"[url:value = 'http://47.236.146.147:60134/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5aa89a96-935a-bec1-713e-00005e4bc8fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.236.28.220:60115/linux","pattern":"[url:value = 'http://47.236.28.220:60115/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea16e865-b59c-3812-4aa2-0000d819803a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.245.84.42:60116/linux","pattern":"[url:value = 'http://47.245.84.42:60116/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d41019f3-4e09-29ea-a7fb-0000c543318f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.226.68.236:60128/linux","pattern":"[url:value = 'http://64.226.68.236:60128/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34c7b97e-dd7e-fc91-84c1-00009a1e4222","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.219.155.47:60149/linux","pattern":"[url:value = 'http://8.219.155.47:60149/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddc21111-f41f-3942-74c9-0000cf210cb8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.222.179.91:60122/linux","pattern":"[url:value = 'http://8.222.179.91:60122/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee44f491-e887-dca3-7457-000009c636b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.219.62.229:60143/linux","pattern":"[url:value = 'http://8.219.62.229:60143/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb30aaaf-3d95-7f36-77b5-000054633bf7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.236.122.72:60123/linux","pattern":"[url:value = 'http://47.236.122.72:60123/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6570ce2e-3fe4-6840-3761-0000c3d9a5dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.236.70.102:60108/linux","pattern":"[url:value = 'http://47.236.70.102:60108/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab3406ba-fcb8-4e5d-7df6-00004b516df0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.219.169.170:60119/linux","pattern":"[url:value = 'http://8.219.169.170:60119/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abede522-a0fb-998a-5fa9-0000320d4ee7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.219.69.227:60133/linux","pattern":"[url:value = 'http://8.219.69.227:60133/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7963fb75-c5bf-a429-3d44-000085bfe7f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.219.210.218:60139/linux","pattern":"[url:value = 'http://8.219.210.218:60139/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89634012-6a35-d350-2094-0000cf164dde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.219.241.116:60106/linux","pattern":"[url:value = 'http://8.219.241.116:60106/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35afb323-abe6-f76e-ed41-000047fcfe20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://47.236.180.235:60136/linux","pattern":"[url:value = 'http://47.236.180.235:60136/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0283687-e34e-c6da-9495-0000aca571d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.237.167.249:60128/linux","pattern":"[url:value = 'http://47.237.167.249:60128/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28c070d2-16a8-c3b6-85c3-0000ce201f9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.237.127.21:60124/linux","pattern":"[url:value = 'http://47.237.127.21:60124/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb76b69d-4ed2-6108-b281-00000a44b3c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.237.124.1:60108/linux","pattern":"[url:value = 'http://47.237.124.1:60108/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--796f68a8-e7f9-5695-4b8e-00005334d469","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.222.247.229:60132/linux","pattern":"[url:value = 'http://8.222.247.229:60132/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01d3d13b-2f65-8fba-90a6-00005bb138ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.213.23.56:60134/linux","pattern":"[url:value = 'http://222.213.23.56:60134/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a167b3c6-61c2-3a0b-8ded-00007d6aa67d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://114.67.87.14:60125/linux","pattern":"[url:value = 'http://114.67.87.14:60125/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc173701-c7b3-966e-e3f8-0000e6600ad6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.245.111.51:60121/linux","pattern":"[url:value = 'http://47.245.111.51:60121/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f634381-04f4-45d6-bed5-00001b6e1852","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://106.13.23.149:6819/linux","pattern":"[url:value = 'http://106.13.23.149:6819/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c1f8934-71e0-9b80-f10f-0000b05d2639","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.161.81:37957/i","pattern":"[url:value = 'http://115.56.161.81:37957/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14ae682a-67f0-344f-5e61-00005de6e9cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.247/i686","pattern":"[url:value = 'http://176.65.139.247/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e42cbcf1-4d7d-3817-02dd-00003ad8d1fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.42.33.2:54415/bin.sh","pattern":"[url:value = 'http://125.42.33.2:54415/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3876b477-2bee-4774-9fd0-00009c0784f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.247/mipsel","pattern":"[url:value = 'http://176.65.139.247/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74b1a0e0-2072-1391-2221-00004ff5aa89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.247/armv7l","pattern":"[url:value = 'http://176.65.139.247/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c23ae6e2-e16c-63a6-d2dd-00009038cc7a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.247/mips","pattern":"[url:value = 'http://176.65.139.247/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4687c262-b115-9be5-bd92-00003535f9e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.247/armv5l","pattern":"[url:value = 'http://176.65.139.247/armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f9cf323-b1cb-ac31-e218-00000855d059","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.247/armv4l","pattern":"[url:value = 'http://176.65.139.247/armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ba669a8-1c95-c202-9cb3-0000a8979f5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.42.33.2:54415/i","pattern":"[url:value = 'http://125.42.33.2:54415/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb565646-9bf1-541f-03d9-0000ee88ba34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.124.6:35918/bin.sh","pattern":"[url:value = 'http://123.5.124.6:35918/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--537dec1c-35bd-2bb5-29de-00003d35ae88","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.185.91.8:52353/i","pattern":"[url:value = 'http://123.185.91.8:52353/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6def627b-f49e-a404-f235-0000cbac34be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.124.6:35918/i","pattern":"[url:value = 'http://123.5.124.6:35918/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71196feb-80b1-29ce-503b-0000d7cfa536","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/adb.sh","pattern":"[url:value = 'http://129.121.110.105/adb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff0afd49-b2a2-dd05-932e-0000cafa85f0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.38.167.76/adb.sh","pattern":"[url:value = 'http://92.38.167.76/adb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eddfcc0a-2998-7b89-e6dc-000088c29792","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.102/fSegv","pattern":"[url:value = 'http://94.154.43.102/fSegv']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79490fed-11d8-248d-9456-0000ddd4e3df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.102/Sgsa","pattern":"[url:value = 'http://94.154.43.102/Sgsa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0bc1ea8-8e2b-f752-0688-0000358b89ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.102/adb.sh","pattern":"[url:value = 'http://94.154.43.102/adb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90437c8c-d908-1069-4ba7-00007006810a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/adb.sh","pattern":"[url:value = 'http://129.121.114.124/adb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0580ead3-8f76-7151-ae87-000032905684","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/Sgsa","pattern":"[url:value = 'http://129.121.110.105/Sgsa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7849670f-a377-e7b0-7a3c-0000da9606bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/fSegv","pattern":"[url:value = 'http://129.121.114.124/fSegv']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cc21844-462a-afa0-8ef9-000074945b5b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/fSegv","pattern":"[url:value = 'http://129.121.110.105/fSegv']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f5331b9-7406-50af-f335-00000ac687d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.38.167.76/Sgsa","pattern":"[url:value = 'http://92.38.167.76/Sgsa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81bf43d9-adb0-5ecb-0b35-0000f6a4f94b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.38.167.76/fSegv","pattern":"[url:value = 'http://92.38.167.76/fSegv']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50a88825-74fd-e66b-70d2-0000e1a7f86c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/Sgsa","pattern":"[url:value = 'http://129.121.114.124/Sgsa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7cdd8cd-9bd9-0084-91ec-0000c135b140","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/jaws.sh","pattern":"[url:value = 'http://93.114.194.171/d/jaws.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b749ccd9-a3d3-d1ee-fa6f-00001e612ad0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/toto.sh","pattern":"[url:value = 'http://93.114.194.171/d/toto.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c5adc3f-07ab-84df-248d-00007d72d576","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/sharp.sh","pattern":"[url:value = 'http://93.114.194.171/d/sharp.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--983d8eae-ffa4-f3cb-ba97-0000daf8cc88","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/coke.sh","pattern":"[url:value = 'http://93.114.194.171/d/coke.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8232286c-ce28-bf5b-3f4a-000020318842","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/arm7","pattern":"[url:value = 'http://93.114.194.171/d/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6f70335-eb42-0a26-6621-0000de22564f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/aarch64","pattern":"[url:value = 'http://93.114.194.171/d/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54b862bb-f184-d2b6-2b20-0000af0c6690","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/mipsel","pattern":"[url:value = 'http://93.114.194.171/d/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35b6dd47-87b8-5578-dbd2-000097377335","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/arm","pattern":"[url:value = 'http://93.114.194.171/d/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c3c4940-f6d0-39df-edce-00008a3840c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/arm5","pattern":"[url:value = 'http://93.114.194.171/d/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84d9b65d-57ac-be8c-6304-0000dd829b87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/nigger/arm5","pattern":"[url:value = 'http://205.237.110.232/nigger/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82980241-72c0-2005-8251-000049ccdb2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/i586","pattern":"[url:value = 'http://93.114.194.171/d/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bca0fb2-f8d9-6bc9-fcee-0000ce8558ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/no_killer/aarch64","pattern":"[url:value = 'http://205.237.110.232/no_killer/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96f4d128-f4c0-3618-6a74-0000e0db903b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/proxy/mipsel","pattern":"[url:value = 'http://205.237.110.232/proxy/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d446f94b-da85-439f-c28b-0000d278990a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/no_killer/mipsel","pattern":"[url:value = 'http://205.237.110.232/no_killer/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b84d023-677b-7412-b266-0000a5903fba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.236/static/js/gpon","pattern":"[url:value = 'http://176.65.139.236/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f14caf9-f7c9-4005-c268-000065ace6d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/adb.sh","pattern":"[url:value = 'http://64.118.132.61/adb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f4d1fd4-23b9-0cfa-2c12-0000bbc1eb6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/test.sh","pattern":"[url:value = 'http://64.118.132.61/test.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f79013a-04df-13a5-a151-0000ed48ddae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/yarn","pattern":"[url:value = 'http://36.255.97.21/yarn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62705e3e-9204-f01c-35d1-0000aebe8cb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/o.sh","pattern":"[url:value = 'http://62.84.172.106/o.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--919a8313-e9ba-ec17-cd1a-0000ea62e9c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/goahead","pattern":"[url:value = 'http://36.255.97.21/goahead']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cfb3bf0-5ad1-f407-8b11-0000576ff2be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/zyxel","pattern":"[url:value = 'http://36.255.97.21/zyxel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cdc2a9f-3bed-197f-9b92-0000e237e8f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://72.56.52.158/x","pattern":"[url:value = 'http://72.56.52.158/x']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12f69a36-937f-715e-821b-00000be0e927","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/pulse","pattern":"[url:value = 'http://36.255.97.21/pulse']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7faf3284-714b-82e0-aa08-0000b9531c85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/zte","pattern":"[url:value = 'http://36.255.97.21/zte']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3322a585-ceb5-3e76-af43-0000159895be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/huawei","pattern":"[url:value = 'http://36.255.97.21/huawei']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63b29599-7f28-3fdd-efcf-00002fed6a4d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/realtek","pattern":"[url:value = 'http://36.255.97.21/realtek']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7600a0c-1e70-26e6-b435-00004a3135ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/hnap","pattern":"[url:value = 'http://36.255.97.21/hnap']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d00131cc-e90d-57cc-f21c-0000dd991d7e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.29.95:46111/bin.sh","pattern":"[url:value = 'http://182.119.29.95:46111/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4baacf6-4ba3-b623-4a50-00006c39e34f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/run.sh","pattern":"[url:value = 'http://91.92.40.13/run.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55c760f8-bd5d-0461-c824-00002f5c5b27","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnriscv32xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnriscv32xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--751f81cb-469a-99ed-7125-0000c61c9885","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnsh4xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnsh4xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fd359e7-7b77-d9ea-0b5b-00002c78e6b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnm68kxnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnm68kxnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f96e00f7-ad15-a4ff-fa4b-0000eef76c5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://72.56.52.158/gg/proxy.armv5l","pattern":"[url:value = 'http://72.56.52.158/gg/proxy.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fd41fd2-6876-f2e6-b306-0000369fbc2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/arm5","pattern":"[url:value = 'http://64.118.132.61/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03d3395a-0b0e-77ef-a882-00008403e01f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/sh4","pattern":"[url:value = 'http://64.118.132.61/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7681db0d-9888-a35f-849c-000004dd79e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/ppc","pattern":"[url:value = 'http://64.118.132.61/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21de601d-0a9d-d417-d6a3-0000e41ee1d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/mips","pattern":"[url:value = 'http://93.114.194.171/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03b24c38-041e-d2cb-924e-0000a7ad232c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.mpsl","pattern":"[url:value = 'http://36.255.97.21/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5273bb06-a8af-21bf-59b5-00003ec66ebb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/lg","pattern":"[url:value = 'http://36.255.97.21/lg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77538561-cca6-e1d2-7375-000009f5888e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/dmpsl","pattern":"[url:value = 'http://93.114.194.171/dmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2179aafd-36ad-0af2-cbe5-0000345b38f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.mips","pattern":"[url:value = 'http://62.84.172.106/dlr.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c16f161-8992-52a4-ecec-000044108198","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.arm5","pattern":"[url:value = 'http://36.255.97.21/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dad9e56-b612-14ad-5266-0000dbe26f40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.arm7","pattern":"[url:value = 'http://62.84.172.106/sys64.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e751f83-80fb-f829-b958-0000fa306b24","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.x86_64","pattern":"[url:value = 'http://62.84.172.106/sys64.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a4a04eb-c052-0ed1-bf7e-0000a3a417ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnriscv64xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnriscv64xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29d594fb-b628-c54d-0ba0-0000ae73b0f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnmipsxnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnmipsxnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--592273c0-71e8-bdd9-fb7f-0000b4abb866","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxni386xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxni386xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01b53c7e-c8d9-a9b3-2722-000062e13e09","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnmicroblazexnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnmicroblazexnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08afd0cd-ddb3-d88c-9718-0000aa503bd3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnx86_64xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnx86_64xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa5f746b-5b8b-09d6-10b8-000000739102","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnsh2xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnsh2xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16dd4e68-ae25-fe69-1f83-0000242a13c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/arm6","pattern":"[url:value = 'http://64.118.132.61/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b17b6b42-9315-d989-14b1-0000c6b60669","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/ppc440","pattern":"[url:value = 'http://64.118.132.61/ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--620a1701-fd6b-a541-ed68-000010e24273","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://72.56.52.158/gg/proxy.mips","pattern":"[url:value = 'http://72.56.52.158/gg/proxy.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--879f76e2-33e8-404a-f004-000047c51142","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://72.56.52.158/gg/proxy.mipsel","pattern":"[url:value = 'http://72.56.52.158/gg/proxy.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f98e5094-9633-0683-dd8e-0000bed7a608","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/m68k","pattern":"[url:value = 'http://64.118.132.61/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcef2775-63ca-5e03-b5f6-00004c3ca265","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnloongarch64xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnloongarch64xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e131505-e4e4-3439-44ba-000041b62001","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnaarch64xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnaarch64xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5a26442-f7ec-2c8a-b99d-0000be2170d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/mips","pattern":"[url:value = 'http://64.118.132.61/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0070a28b-b547-0e67-e056-0000d5221e98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/mpsl","pattern":"[url:value = 'http://64.118.132.61/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0259887-211b-87ae-1a39-0000e2909c4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/aws","pattern":"[url:value = 'http://36.255.97.21/aws']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b0fd16d-b59a-b2aa-a549-0000bce5f409","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.arm5","pattern":"[url:value = 'http://62.84.172.106/dlr.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79f20cb4-5071-0e8a-4972-0000c927cf27","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://93.114.194.171/mips2","pattern":"[url:value = 'http://93.114.194.171/mips2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c974e084-161d-0583-27b0-00001b5cb0f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.ppc","pattern":"[url:value = 'http://62.84.172.106/dlr.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3c64b5f-a084-0ea8-e145-0000f21cdd8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnpowerpcxnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnpowerpcxnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68712d2c-cb60-7419-2be4-0000c209e107","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.ppc","pattern":"[url:value = 'http://62.84.172.106/sys64.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0326cb1f-7d8e-7248-094f-0000190f2a98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/thinkphp","pattern":"[url:value = 'http://36.255.97.21/thinkphp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94ab6c34-60e6-0750-bdf6-00005f5856bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.mpsl","pattern":"[url:value = 'http://62.84.172.106/dlr.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65767527-953c-f0cb-9424-0000225a4c14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/wow","pattern":"[url:value = 'http://205.237.110.232/wow']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f410a22-4ac7-aabe-2f4a-0000348b4e83","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.i686","pattern":"[url:value = 'http://62.84.172.106/sys64.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30fbb6ab-73d9-51f7-23fe-0000b9abd5b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.x86_64","pattern":"[url:value = 'http://36.255.97.21/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--151fa0db-87a0-e41b-3387-000056a52e76","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.arm6","pattern":"[url:value = 'http://36.255.97.21/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d23cf7b-a73f-2c34-8488-000042d778f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.sh4","pattern":"[url:value = 'http://62.84.172.106/sys64.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--028d648f-b8b3-5511-dc97-00008c87482f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.ppc","pattern":"[url:value = 'http://36.255.97.21/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9d584ea-4fc3-f74e-e47a-0000f9556b35","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.mips","pattern":"[url:value = 'http://62.84.172.106/sys64.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9abd5e38-2e29-32a6-94f3-00004fe64ef7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnor1kxnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnor1kxnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc2602d3-802b-e123-710b-00009b822904","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.sh4","pattern":"[url:value = 'http://62.84.172.106/dlr.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6fcfb21-0230-2617-1bfd-00008ebaef9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/gpon443","pattern":"[url:value = 'http://36.255.97.21/gpon443']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d24e437-349d-0606-1230-0000d343649f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.aarch64","pattern":"[url:value = 'http://62.84.172.106/sys64.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d559e2b-3816-6871-09c2-000034adee2d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.m68k","pattern":"[url:value = 'http://62.84.172.106/dlr.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3a3ff7a-637b-3db4-4c01-000071eba7cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.arm5","pattern":"[url:value = 'http://62.84.172.106/sys64.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e608340-0e39-6ac7-e892-0000d9f062c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.mips64","pattern":"[url:value = 'http://62.84.172.106/dlr.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7204e76-e38f-8d21-359e-0000f19e13a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.x86_64","pattern":"[url:value = 'http://62.84.172.106/dlr.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45c31ce2-c62b-bbfa-0f58-0000ba0a8f72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.x86","pattern":"[url:value = 'http://62.84.172.106/sys64.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa4cbe27-5707-9400-fdcc-0000cc589bbc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.m68k","pattern":"[url:value = 'http://36.255.97.21/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b252936c-261d-d9f0-164f-00006ab29e59","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://72.56.52.158/ass","pattern":"[url:value = 'http://72.56.52.158/ass']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c074223-a327-cd5c-46bc-00009256057f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.mpsl","pattern":"[url:value = 'http://62.84.172.106/sys64.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1edb610a-4970-4e43-ac66-0000940691dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/i586","pattern":"[url:value = 'http://205.237.110.232/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--820680d7-777c-4858-66d3-0000ae505be7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.arm6","pattern":"[url:value = 'http://62.84.172.106/dlr.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5f9b03c-1ffc-d56a-4990-0000f9a3bdef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.m68k","pattern":"[url:value = 'http://62.84.172.106/sys64.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77df86d8-32ae-90ba-e003-00000c59d1d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.sh4","pattern":"[url:value = 'http://36.255.97.21/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--011e6646-6ff7-ae31-7555-000049c9459f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.arm","pattern":"[url:value = 'http://62.84.172.106/dlr.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a01babee-200f-2e07-6789-0000909c146a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.arm","pattern":"[url:value = 'http://62.84.172.106/sys64.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5aaaaec0-3b19-9679-3667-0000635e0825","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.arm6","pattern":"[url:value = 'http://62.84.172.106/sys64.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cae7e24d-4889-6456-015e-0000de12bd42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.arm","pattern":"[url:value = 'http://36.255.97.21/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7ed2435-17c0-3c0f-0db2-0000f9851d41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.i686","pattern":"[url:value = 'http://62.84.172.106/dlr.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33aae194-b33d-2a80-4ba8-00007f0addea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.sparc","pattern":"[url:value = 'http://62.84.172.106/dlr.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6608af1-5ad5-3f09-57aa-0000ccae4d66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.mips","pattern":"[url:value = 'http://36.255.97.21/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2518fa67-a5f5-154d-1861-000044d1094f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d2aaed","pattern":"[url:value = 'http://5.182.210.174/d2aaed']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--826cfda4-a44e-ff03-4249-0000cf110213","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9da0b2","pattern":"[url:value = 'http://5.182.210.174/9da0b2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f2c4761-f466-d86b-6c4f-0000308351c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0b3b49","pattern":"[url:value = 'http://5.182.210.174/0b3b49']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2ad4ad6-65a3-5c12-e183-0000df837414","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7f80fa","pattern":"[url:value = 'http://5.182.210.174/7f80fa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a710c0bb-ff51-deaa-efcc-0000eb3093d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e7addc","pattern":"[url:value = 'http://5.182.210.174/e7addc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--602719b8-20b1-9a59-e416-00000131f615","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6337f1","pattern":"[url:value = 'http://5.182.210.174/6337f1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--158d70d7-9c3a-fec6-a787-0000c086e065","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2d7d14","pattern":"[url:value = 'http://5.182.210.174/2d7d14']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35e2d9e6-ebc2-c290-59da-000047e7148b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/110181","pattern":"[url:value = 'http://5.182.210.174/110181']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67c7d369-635a-3e47-4aa9-00001c6574a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7e44c2","pattern":"[url:value = 'http://5.182.210.174/7e44c2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc705f63-6bcf-4fb3-d7fb-0000d3c100bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b4efc0","pattern":"[url:value = 'http://5.182.210.174/b4efc0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f2695dc-11da-0e2f-0c66-0000aede72d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/76341d","pattern":"[url:value = 'http://5.182.210.174/76341d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29fba434-7272-e23b-d264-000037105ab2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/83c238","pattern":"[url:value = 'http://5.182.210.174/83c238']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4b7af0c-6ff6-a51a-768e-000081f63a37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.247/meow.sh","pattern":"[url:value = 'http://176.65.139.247/meow.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68a6ddf5-3fef-f6fa-5469-00004c5a4972","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.23.183:58054/bin.sh","pattern":"[url:value = 'http://110.37.23.183:58054/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f200c0a-c5dd-65d6-9550-00006e3aafc3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.4.25.120:42203/i","pattern":"[url:value = 'http://42.4.25.120:42203/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2c3346b-b8a1-20b5-d0f2-000009b30170","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://muddy-sound-e0cd.nodetectonn.workers.dev/PPRvN","pattern":"[url:value = 'https://muddy-sound-e0cd.nodetectonn.workers.dev/PPRvN']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcd08642-f05f-610b-aa89-00006c62f1e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://res.cloudinary.com/oytyusbd/image/upload/v1786325859/img_213650.jpg","pattern":"[url:value = 'https://res.cloudinary.com/oytyusbd/image/upload/v1786325859/img_213650.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e9126cf-3635-b0d5-37c1-00002a53b45b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.247/o.xml","pattern":"[url:value = 'http://176.65.139.247/o.xml']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57410444-b0d7-45d5-e11c-0000e652d4e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.247/peak.sh","pattern":"[url:value = 'http://176.65.139.247/peak.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36369c38-6d5f-78db-2128-0000cc40a13f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://sumiko.vu/hypeman/agent.bin","pattern":"[url:value = 'https://sumiko.vu/hypeman/agent.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c78fae22-27e1-620f-17e8-0000823cd831","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://muddy-sound-e0cd.nodetectonn.workers.dev/SntXc","pattern":"[url:value = 'https://muddy-sound-e0cd.nodetectonn.workers.dev/SntXc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3ae66fb-a416-4b41-8f7f-00004f2e9b92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://38.240.55.107/80/goodthingsforbestfeelingsweformegood.hta","pattern":"[url:value = 'http://38.240.55.107/80/goodthingsforbestfeelingsweformegood.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--101db2df-2fe0-1fc7-0d7d-0000c7569750","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://144.172.107.214/29/goodthingsforbestpersonforme.hta","pattern":"[url:value = 'http://144.172.107.214/29/goodthingsforbestpersonforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcc5158e-538a-0f9b-102c-0000c366a3b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-988fedd2621d406591dbb4e9358bc901.r2.dev/mostdon.png","pattern":"[url:value = 'https://pub-988fedd2621d406591dbb4e9358bc901.r2.dev/mostdon.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e4710c3-d194-2a3a-cdce-0000c5e5ab4b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-ebd75badb3504e77aa1924be8dbce949.r2.dev/yamfloor.hta","pattern":"[url:value = 'https://pub-ebd75badb3504e77aa1924be8dbce949.r2.dev/yamfloor.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a25d34e0-12b9-11e9-83ae-0000f3644b12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.106.94:48303/bin.sh","pattern":"[url:value = 'http://42.233.106.94:48303/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--403d16e4-1228-2af5-e2e3-00001e6dc454","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-988fedd2621d406591dbb4e9358bc901.r2.dev/bookwin.png","pattern":"[url:value = 'https://pub-988fedd2621d406591dbb4e9358bc901.r2.dev/bookwin.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ff5caac-419b-d6f3-0f0e-0000d8d6d8a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.172.254/25/weneedtogetbestthingswithbetterplacesforme.hta","pattern":"[url:value = 'http://107.172.172.254/25/weneedtogetbestthingswithbetterplacesforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aa2541f-56b3-4906-bec7-00000503fb0d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://plain-wnam-prod-public.komododecks.com/202608/11/xi178dBQGEDOqhKHXtuO/image.png","pattern":"[url:value = 'https://plain-wnam-prod-public.komododecks.com/202608/11/xi178dBQGEDOqhKHXtuO/image.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84b8a963-8823-3150-7b41-000004980c4d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.172.172.254/img/img_041741.png","pattern":"[url:value = 'http://107.172.172.254/img/img_041741.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f02d2ec1-4045-1592-beab-00002ac3ec70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.141.47.192:60272/bin.sh","pattern":"[url:value = 'http://222.141.47.192:60272/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecd1e4d7-34ef-7ecc-bdd2-0000b776b25d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.189.160.169:47495/i","pattern":"[url:value = 'http://119.189.160.169:47495/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a23851e-f29d-77c6-fa56-0000065dd622","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.23.183:58054/i","pattern":"[url:value = 'http://110.37.23.183:58054/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf669434-a75e-8817-0346-000066e8835e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.141.47.192:60272/i","pattern":"[url:value = 'http://222.141.47.192:60272/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7c7a7aa-c18c-2dd6-7144-0000c4dfe082","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.10.198:58630/bin.sh","pattern":"[url:value = 'http://182.121.10.198:58630/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb83254f-dd72-47be-07e9-000013f28d95","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://orienttaxtile.com/ttues/crypted.ps1","pattern":"[url:value = 'https://orienttaxtile.com/ttues/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcea6f1c-c6f2-3bb3-7f5e-000043f06308","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/PW/accrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/PW/accrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dd6152d-38b6-d281-9d75-00009ce601b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.20:51485/bin.sh","pattern":"[url:value = 'http://210.208.110.20:51485/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67a978c6-9da8-ac84-5010-000029b84789","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.106.94:48303/i","pattern":"[url:value = 'http://42.233.106.94:48303/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--583f19d5-ca7f-ba9f-a9cf-000052523608","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.10.198:58630/i","pattern":"[url:value = 'http://182.121.10.198:58630/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38ecc24d-cb07-12a0-bcaf-0000dc44409a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.20:51485/i","pattern":"[url:value = 'http://210.208.110.20:51485/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d48cd89-0f04-c86c-3b56-00001cc1053d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.54.232.80:41350/bin.sh","pattern":"[url:value = 'http://61.54.232.80:41350/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cc5dd0f-23a8-e8df-85ab-000020b28fd2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mukabar.co.mz/css/images/stego_oo8nser2q2.png","pattern":"[url:value = 'https://mukabar.co.mz/css/images/stego_oo8nser2q2.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfaa7152-f285-dd99-37dc-00009b69bd8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.109.139.74/hdGFtyu.png","pattern":"[url:value = 'http://192.109.139.74/hdGFtyu.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea0011c8-7779-c0d6-ecd8-00003813a1ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.57.233.127:51731/bin.sh","pattern":"[url:value = 'http://115.57.233.127:51731/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bca288a-f5d7-27b1-dc33-00003e385ee7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.54.232.80:41350/i","pattern":"[url:value = 'http://61.54.232.80:41350/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bbc962b-df91-e55c-7ce7-000025a23eef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://101.108.151.84:39084/i","pattern":"[url:value = 'http://101.108.151.84:39084/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c78e9e3a-b2e7-b6b7-8ef1-000038482c9c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.195/loli","pattern":"[url:value = 'http://176.65.139.195/loli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f2d5d2d-5c5d-f7b0-b7f1-00008e29ef3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/auto","pattern":"[url:value = 'http://176.65.139.195/auto']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c64c9e9f-2676-814e-0bdf-00009291108a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/auto1","pattern":"[url:value = 'http://176.65.139.195/auto1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de88a5be-15e8-7b6c-1199-00000ba5d5d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/nvidia.sh","pattern":"[url:value = 'http://176.65.139.195/nvidia.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d9e67fe-4732-9f85-d94e-00007627587a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/check1.sh","pattern":"[url:value = 'http://176.65.139.195/check1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17691eed-29ec-8aa1-b588-0000b563e069","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/boss","pattern":"[url:value = 'http://176.65.139.195/boss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad660299-41d2-e5d5-254d-000090536093","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/checkmacos.sh","pattern":"[url:value = 'http://176.65.139.195/checkmacos.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01e80d09-c3f6-288f-c0cc-0000e0d86a27","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/check.sh","pattern":"[url:value = 'http://176.65.139.195/check.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b87c9fe0-1b0d-727a-a6d7-0000f2fe3e74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/cliaarch","pattern":"[url:value = 'http://176.65.139.195/cliaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96bfb5b3-6ede-e2dd-a253-0000f102f191","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/main","pattern":"[url:value = 'http://176.65.139.195/main']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ede7927d-2b7a-a225-0676-0000d5462103","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/oldboss","pattern":"[url:value = 'http://176.65.139.195/oldboss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4df75f65-4f5c-b332-eed1-0000a4906a0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/Error84","pattern":"[url:value = 'http://176.65.139.195/Error84']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06471e45-dee1-4b66-3b1d-0000bedee16f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/cli","pattern":"[url:value = 'http://176.65.139.195/cli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdbba051-d2b1-cd71-c7dd-00006bbcd709","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/traff","pattern":"[url:value = 'http://176.65.139.195/traff']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe3ffd3d-d0b9-e08c-4b3e-0000cfb1815e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.195/oldercheck.sh","pattern":"[url:value = 'http://176.65.139.195/oldercheck.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c18e27bc-cacc-cd76-b051-0000e8f75e59","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/log","pattern":"[url:value = 'http://176.65.139.195/log']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4461133a-df4c-94fa-075c-000086d035f0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/traffaarch","pattern":"[url:value = 'http://176.65.139.195/traffaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--799cca24-19fd-84bd-6d41-0000039e4b40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/wd1337","pattern":"[url:value = 'http://176.65.139.195/wd1337']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b04d9f2-d29c-59f6-63b8-000015a158d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/syst3md","pattern":"[url:value = 'http://176.65.139.195/syst3md']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10dee19a-1c4a-a721-f652-000022fc45e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/proot","pattern":"[url:value = 'http://176.65.139.195/proot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ef9e2f9-0c61-5980-3ed9-0000e64ad629","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/proot","pattern":"[url:value = 'http://176.65.139.211/proot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cddae0b-8a8e-19ad-3bb6-000030c5951d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/syst3md","pattern":"[url:value = 'http://176.65.139.211/syst3md']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a3ee584-38ac-7214-bbff-0000f022ecca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/oldboss","pattern":"[url:value = 'http://176.65.139.211/oldboss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9b5198c-e82a-767a-79f0-00003c5249b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/log","pattern":"[url:value = 'http://176.65.139.211/log']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad39ddc5-4df3-14e0-96fe-0000088122f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/wd1337","pattern":"[url:value = 'http://176.65.139.211/wd1337']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d677a4e-ec78-cc56-616d-00008874807e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07dfc050-1dda-afa2-5802-0000455c7312","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f403c114-d633-807d-99d4-0000a4b1f943","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb3d3508-9e70-9014-ac7c-0000003c9a5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--723464b2-458a-26f9-1a86-0000128935b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18cd07c7-1fa9-8181-45a1-0000ca02edb9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05335424-39c7-6050-352c-0000aa3552d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c6947d6-5b85-f1b5-1dc0-0000f6240c2e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbd16ad1-6df4-d6f1-6b5e-000016fb7b1d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d14b4e98-f134-ac48-6379-0000888256a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81512343-4809-66fd-ad58-0000246f60b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9b1f0da-4331-19b9-4a72-0000dcb29736","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64998851-41cc-d890-2d1a-0000e38138ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--045b143e-bdf4-516f-c869-00000894d219","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--660dfa22-df9b-5b44-2dee-00005f5da2cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://2.58.56.151/bin/support.client.exe","pattern":"[url:value = 'https://2.58.56.151/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--337bd4b2-024c-abcf-d913-0000102fc74c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://2.58.56.151/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://2.58.56.151/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05856de8-e2ae-c48d-508f-00001e06a6f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.198.131.176/bin/support.client.exe","pattern":"[url:value = 'http://124.198.131.176/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0e336d9-6a8e-f414-9c1e-0000c6316976","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.198.131.176/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://124.198.131.176/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3f42a3f-a1d5-c177-027c-00000efa1d8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.172.96.218:7777/coldcard_final.py","pattern":"[url:value = 'http://144.172.96.218:7777/coldcard_final.py']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6df6b573-b2b4-d015-f176-00006fad9e1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.229.87:35915/bin.sh","pattern":"[url:value = 'http://219.155.229.87:35915/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96880b4d-493d-d4ce-5659-00008ca38972","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.57.80.18:35873/i","pattern":"[url:value = 'http://115.57.80.18:35873/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01f90936-3b44-0b6e-8c85-0000c1332d7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.116.238.55:57598/bin.sh","pattern":"[url:value = 'http://119.116.238.55:57598/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d7c3901-0bb1-8f6b-b86c-0000a2839fa9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://14.0.131.161:51651/i","pattern":"[url:value = 'http://14.0.131.161:51651/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2936138b-1d4b-3784-c171-0000b74365ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://178.16.54.38/us01.zoom-connect-invites.us.zip","pattern":"[url:value = 'https://178.16.54.38/us01.zoom-connect-invites.us.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d61b99e-b833-eb6b-5ba2-00000c499456","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.236.173:58333/i","pattern":"[url:value = 'http://219.155.236.173:58333/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c299eb98-3993-3960-cd8d-0000332fade3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.241.208.90/ConnectProAgentSetup.msi","pattern":"[url:value = 'http://185.241.208.90/ConnectProAgentSetup.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81f4a534-b2fc-96b6-4d11-0000beb476ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.228.207:54336/i","pattern":"[url:value = 'http://125.41.228.207:54336/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a38cc4c-516d-021f-b272-0000c2bb11dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.173.53.215:46519/bin.sh","pattern":"[url:value = 'http://175.173.53.215:46519/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4690a98-dd07-cc62-8c9a-0000c9f79d64","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.45.230:53516/bin.sh","pattern":"[url:value = 'http://123.8.45.230:53516/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3227d6b2-5d40-ee84-9348-000040c4b810","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.214.53:44835/i","pattern":"[url:value = 'http://120.84.214.53:44835/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--648af908-b3b2-c404-1814-0000327624b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.25.123.5:48319/bin.sh","pattern":"[url:value = 'http://78.25.123.5:48319/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84a10d5e-e3f7-68b4-bb37-0000862baba3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.25.123.5:48319/i","pattern":"[url:value = 'http://78.25.123.5:48319/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6300e8fb-56f0-eb4f-1f87-0000db40a018","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.45.230:53516/i","pattern":"[url:value = 'http://123.8.45.230:53516/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--277938e0-5e76-dcd2-564a-000063d2e04a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.173.53.215:46519/i","pattern":"[url:value = 'http://175.173.53.215:46519/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23e1853b-99a8-50b2-447c-00004db1f11c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.227.207.180:58373/bin.sh","pattern":"[url:value = 'http://42.227.207.180:58373/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--942b8d2a-77aa-5797-71d8-0000e33d994a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.227.207.180:58373/i","pattern":"[url:value = 'http://42.227.207.180:58373/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5800256-8149-d6b5-841b-000043c9f6bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.arm","pattern":"[url:value = 'http://46.151.182.200/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8023e41-d159-6368-8494-00002ae5d8e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.arm7","pattern":"[url:value = 'http://46.151.182.200/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e275b18f-05d4-aca6-6cbd-0000c3ae03bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.165.9:33305/i","pattern":"[url:value = 'http://182.117.165.9:33305/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f441c7de-fca1-cf7a-7480-0000f6016def","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://190.109.228.150:37896/bin.sh","pattern":"[url:value = 'http://190.109.228.150:37896/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ebcd385-c700-177a-966e-00007b4af5b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/faraza-1/chillvrmod.com/releases/download/v1.0.0/ChillVROut.exe","pattern":"[url:value = 'https://github.com/faraza-1/chillvrmod.com/releases/download/v1.0.0/ChillVROut.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59f933c8-7fc1-bf76-45cf-00005bc0ad87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.dropbox.com/scl/fi/20bypo9tl56golwmhkuzx/WatchGoParty.exe?rlkey=djyz9nidcvc5e7ojr8adaoiaf&st=9ptdt498&dl=1","pattern":"[url:value = 'https://www.dropbox.com/scl/fi/20bypo9tl56golwmhkuzx/WatchGoParty.exe?rlkey=djyz9nidcvc5e7ojr8adaoiaf&st=9ptdt498&dl=1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efbcb0b2-c195-1ccd-764b-000014be3e20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://190.109.228.150:37896/i","pattern":"[url:value = 'http://190.109.228.150:37896/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--135cbdfc-d0b9-fb86-9b47-00007b1e0223","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.142.245.198:49568/bin.sh","pattern":"[url:value = 'http://222.142.245.198:49568/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c1cdbd7-86af-184f-5ef6-00000a7d260c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.91.206.69:41124/bin.sh","pattern":"[url:value = 'http://59.91.206.69:41124/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--084e0fe3-da09-a14c-56aa-0000492e5b07","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.142.245.198:49568/i","pattern":"[url:value = 'http://222.142.245.198:49568/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b4bf2ae-4ea6-0b3d-0d93-0000e0142e88","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.148.158.154:36869/bin.sh","pattern":"[url:value = 'http://175.148.158.154:36869/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a326f81c-6f80-a43c-e2eb-0000ef22f151","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.45.148.93:57695/bin.sh","pattern":"[url:value = 'http://125.45.148.93:57695/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1277b336-b398-ca15-a0da-0000d519c57a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.251.225.122:36907/i","pattern":"[url:value = 'http://112.251.225.122:36907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be3cca41-50ac-9923-c05c-00009b54e1a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://163.142.93.187:39139/bin.sh","pattern":"[url:value = 'http://163.142.93.187:39139/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--941c4229-22cf-63e4-34d4-000015a4499d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.148.158.154:36869/i","pattern":"[url:value = 'http://175.148.158.154:36869/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--469b1137-f981-1695-c0ed-0000e156df21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.175.7.234:37031/i","pattern":"[url:value = 'http://175.175.7.234:37031/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbfeface-8d81-be28-8b0e-0000db112803","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://163.142.93.187:39139/i","pattern":"[url:value = 'http://163.142.93.187:39139/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7faeca1d-d154-76b4-0850-0000e0f3c4d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.138.136:38226/bin.sh","pattern":"[url:value = 'http://182.121.138.136:38226/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fdcdc0d-474e-28f1-fbac-00005e46c21e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.175.231:41660/bin.sh","pattern":"[url:value = 'http://42.224.175.231:41660/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1155b79c-e0eb-6f0d-2a3d-0000b0fa992f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.141.166:50250/bin.sh","pattern":"[url:value = 'http://221.15.141.166:50250/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61055ea5-7f80-41bf-79d4-00007f975e11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.138.136:38226/i","pattern":"[url:value = 'http://182.121.138.136:38226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--281aab1b-c495-4721-4c59-00005494954f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.4.178.145:35087/bin.sh","pattern":"[url:value = 'http://123.4.178.145:35087/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b29c4ef-25e4-b72f-3b55-0000bbec581e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.141.166:50250/i","pattern":"[url:value = 'http://221.15.141.166:50250/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93563cbf-0f74-b880-40f6-0000cb8f712e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.150.5:40794/bin.sh","pattern":"[url:value = 'http://115.50.150.5:40794/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--115368bc-fc01-0b84-e8b1-00006774a32a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.146.54.164:45403/i","pattern":"[url:value = 'http://175.146.54.164:45403/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--382032c2-8c02-9295-a593-0000b0437301","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.180.33.198:56646/bin.sh","pattern":"[url:value = 'http://42.180.33.198:56646/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63df1222-056d-8c5f-3a78-0000a12768d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.219.18.191:56945/bin.sh","pattern":"[url:value = 'http://27.219.18.191:56945/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32c92b9d-6d45-a23e-a621-00009575e942","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.241.62:53088/i","pattern":"[url:value = 'http://115.55.241.62:53088/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e03d2359-4a97-a45d-8245-000071da6b01","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.219.18.191:56945/i","pattern":"[url:value = 'http://27.219.18.191:56945/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f401be0-4271-a85a-634c-0000827e1f8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://1.62.79.200:51623/bin.sh","pattern":"[url:value = 'http://1.62.79.200:51623/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f34cf5f0-7198-4359-f5aa-000057132ece","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.195.102:56873/bin.sh","pattern":"[url:value = 'http://115.55.195.102:56873/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--506ddb1a-01ca-bc54-751b-0000b4086269","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/files/nels/cli.exe","pattern":"[url:value = 'http://62.60.226.140/files/nels/cli.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--435be923-3c0f-6869-7908-0000bd787d8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.131.5.187:37816/i","pattern":"[url:value = 'http://124.131.5.187:37816/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ec425c4-0c77-7690-dcfd-0000162aad02","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.187.193.166:37676/i","pattern":"[url:value = 'http://110.187.193.166:37676/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c168cb0-ccd4-4281-105c-000052cad9e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.175.14:46692/i","pattern":"[url:value = 'http://222.137.175.14:46692/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65b9e43b-9abc-be39-f9b5-000054e7727a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.175.14:46692/bin.sh","pattern":"[url:value = 'http://222.137.175.14:46692/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a49ed43-0a99-71a9-582b-0000627a02c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.51.88.28:37461/i","pattern":"[url:value = 'http://115.51.88.28:37461/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82ebbec1-d4ab-68d3-4997-00002985019d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.125.9:33994/i","pattern":"[url:value = 'http://219.155.125.9:33994/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--539ec86b-bb89-fdb8-a02b-0000a4608239","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.246.175:50104/bin.sh","pattern":"[url:value = 'http://110.39.246.175:50104/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d89b479-b52d-32da-2934-0000bb9b4604","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.51.88.28:37461/bin.sh","pattern":"[url:value = 'http://115.51.88.28:37461/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41d3453c-70a3-6759-cf63-00004bd36135","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.180.33.198:56646/i","pattern":"[url:value = 'http://42.180.33.198:56646/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f1d61fb-bbd0-6a68-c3aa-00005207efbf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.195.102:56873/i","pattern":"[url:value = 'http://115.55.195.102:56873/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d619f8fa-ca71-7579-3b7c-0000f42b700b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.255.23:39795/i","pattern":"[url:value = 'http://182.114.255.23:39795/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27166075-7643-500a-0679-0000376531c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.118.60:44378/i","pattern":"[url:value = 'http://182.116.118.60:44378/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1355b6b5-7f98-a927-df14-00009e7dd503","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.255.23:39795/bin.sh","pattern":"[url:value = 'http://182.114.255.23:39795/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f056d70-da92-d90c-4a90-000000beccc4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://42.53.59.112:44682/i","pattern":"[url:value = 'http://42.53.59.112:44682/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d446d5e-300b-eb2b-b01d-000033b6d65a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://1.62.79.200:51623/i","pattern":"[url:value = 'http://1.62.79.200:51623/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6417e625-7475-58c1-f2ca-00004107106c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.90.13:33466/bin.sh","pattern":"[url:value = 'http://123.8.90.13:33466/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91d40cfc-daa6-869d-f0d7-000065a3964a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.206.188.38:34593/i","pattern":"[url:value = 'http://27.206.188.38:34593/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ecc21aa-99cb-8739-3d96-00003ed4061e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.86.83:33716/i","pattern":"[url:value = 'http://110.36.86.83:33716/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d82232ba-072f-9f11-da04-000004af2b25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.248.115:38763/bin.sh","pattern":"[url:value = 'http://182.126.248.115:38763/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15f5c6c3-9e04-f18c-0e6a-000037e81bf9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.233.94.135:53401/bin.sh","pattern":"[url:value = 'http://45.233.94.135:53401/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f5a7679-c8ad-14fe-5d19-00005d8d70d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.233.94.135:53401/i","pattern":"[url:value = 'http://45.233.94.135:53401/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4916d463-a2f1-bda0-df96-0000af6785d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.248.115:38763/i","pattern":"[url:value = 'http://182.126.248.115:38763/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83dc6019-1c9d-50a6-9e9e-00000d19288a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.59.232.35:51478/bin.sh","pattern":"[url:value = 'http://42.59.232.35:51478/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4079e64e-8aff-af21-2af8-0000af8f78d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.53.25:34437/bin.sh","pattern":"[url:value = 'http://110.37.53.25:34437/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1d25553-b628-b0ce-2baf-0000359dcf4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.124.253.104:42413/bin.sh","pattern":"[url:value = 'http://182.124.253.104:42413/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79226ad9-e889-6cbe-679d-00003c5c89a1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.59.232.35:51478/i","pattern":"[url:value = 'http://42.59.232.35:51478/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56e6601c-e205-0d73-23e1-0000cdde3306","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.2.24:55703/i","pattern":"[url:value = 'http://123.129.2.24:55703/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--921b322f-e447-cd0d-f73e-0000a072d97c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.10.162:46177/bin.sh","pattern":"[url:value = 'http://182.117.10.162:46177/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8deeecbb-8aa4-50bf-8526-00008804274d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.53.25:34437/i","pattern":"[url:value = 'http://110.37.53.25:34437/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e475dc5e-d4ed-7486-8fd2-00009fb64950","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.242.210:39720/bin.sh","pattern":"[url:value = 'http://110.39.242.210:39720/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c4d57d7-7cf6-b7c8-0362-0000812790d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://218.74.100.187:56483/bin.sh","pattern":"[url:value = 'http://218.74.100.187:56483/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83f659ed-8421-5126-b8ee-00006aebb7ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.184.102.26:41199/i","pattern":"[url:value = 'http://105.184.102.26:41199/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd0a2afd-1398-a0a3-8ac9-0000c6d480a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.185.249:41991/bin.sh","pattern":"[url:value = 'http://182.121.185.249:41991/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9861cda0-9928-94f7-5fa9-000069efe09b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.10.162:46177/i","pattern":"[url:value = 'http://182.117.10.162:46177/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ec10031-9e0c-7d78-2953-00003dbc3831","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.73.44.67:44345/i","pattern":"[url:value = 'http://39.73.44.67:44345/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aa0784c-fea8-31ae-ca72-0000bcc66196","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.185.249:41991/i","pattern":"[url:value = 'http://182.121.185.249:41991/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0054c881-c826-8022-8cd0-00007ba4fcb2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.156.184.4:33396/i","pattern":"[url:value = 'http://219.156.184.4:33396/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65ecde69-85be-ae68-5456-00000577f3a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://218.74.100.187:56483/i","pattern":"[url:value = 'http://218.74.100.187:56483/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--032bc95c-f271-5885-a6a6-00002754073e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.212.157:52831/bin.sh","pattern":"[url:value = 'http://219.157.212.157:52831/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01ce0444-4430-7db5-dbbd-00009b554a00","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://tblcxmo.duckdns.org/sysorbit.apk","pattern":"[url:value = 'http://tblcxmo.duckdns.org/sysorbit.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--445cc04a-c918-c9d2-7fab-0000205c876d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.212.157:52831/i","pattern":"[url:value = 'http://219.157.212.157:52831/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a34babb1-054f-0e7a-fe3e-00009c172c10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.190.224.62:36692/bin.sh","pattern":"[url:value = 'http://196.190.224.62:36692/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6714d9ab-0e0b-e205-2914-00006b7b5d63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.ppc","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f56d5c6-e0a5-a195-aad3-00001f136ac8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.spc","pattern":"[url:value = 'http://46.151.182.200/bins/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32fc95cb-c95f-df0d-bcc0-0000d1b1fc55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/lm","pattern":"[url:value = 'http://46.151.182.200/lm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93e3613a-bc27-e75b-41d4-0000986fcc5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/script.sh","pattern":"[url:value = 'http://46.151.182.200/script.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af7e5f69-f81b-023f-a021-000039eea80e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.arm","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f050ed7-de67-f418-ea87-00009259bf85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.arm6","pattern":"[url:value = 'http://46.151.182.200/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d707a3e7-48e5-fdb4-23e3-00004395f9d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.x86_64","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c57aed5d-bc33-3ffd-6c1e-0000cb12ed0b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.arm","pattern":"[url:value = 'http://46.151.182.200/bins/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17ee36a0-6483-36fd-ea18-0000e3a046d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.ppc","pattern":"[url:value = 'http://46.151.182.200/dlr.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad20fd52-d592-2857-04f2-0000013200e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.x86_64","pattern":"[url:value = 'http://46.151.182.200/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ac92e36-6e21-a3bc-861c-00003d2fafae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.arm","pattern":"[url:value = 'http://77.90.185.66/miraint.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c714221-667f-2d50-6fed-000028b40528","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/xvr.sh","pattern":"[url:value = 'http://77.90.185.66/xvr.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2a3a8f4-87c0-53b1-6154-00006fba5ac3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.ppc","pattern":"[url:value = 'http://77.90.185.66/miraint.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71670c89-07a8-a0a1-e053-000065f1de27","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.mips","pattern":"[url:value = 'http://77.90.185.66/miraint.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22c2c05a-e4d8-1493-713d-00002bcd9a38","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.arc","pattern":"[url:value = 'http://46.151.182.200/bins/bot.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd8079a-8edc-4f38-8e8b-0000c3bbb402","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.mips","pattern":"[url:value = 'http://46.151.182.200/bins/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fdf0525-8d32-21d8-fa3f-0000a1ebfafa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/hybrid.sh","pattern":"[url:value = 'http://77.90.185.66/hybrid.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--311a1d09-7502-c714-724e-0000f9a9eb76","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/faith.sh","pattern":"[url:value = 'http://77.90.185.66/faith.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89a8e234-593f-3a80-6718-00006351b2df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.mpsl","pattern":"[url:value = 'http://46.151.182.200/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62bcd4f7-863e-6ae3-470f-0000637edf25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.sh4","pattern":"[url:value = 'http://46.151.182.200/dlr.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15a888f9-401a-5866-fdac-00006534347d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.spc","pattern":"[url:value = 'http://46.151.182.200/dlr.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25fbe6e2-27d6-a83b-6f0b-00007c5b3ebb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.x86_64","pattern":"[url:value = 'http://46.151.182.200/bins/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--655267f2-b98b-bcf6-35ec-0000edef2fcd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.spc","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7f4334c-c02c-982e-0275-0000c34d62d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.m68k","pattern":"[url:value = 'http://46.151.182.200/bins/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1606e5e-f382-f4f2-b198-000024986194","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/boa.sh","pattern":"[url:value = 'http://77.90.185.66/boa.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0494e45-7ecd-e0d0-21f4-0000e3dd91ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/mirai.sh4","pattern":"[url:value = 'http://77.90.185.66/mirai.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--784289c8-42d0-1f95-79df-000019598190","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.sh4","pattern":"[url:value = 'http://46.151.182.200/bins/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12463bfc-bd0e-9196-7778-0000eba5c495","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.sh4","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c7a24fd-7978-2dc0-7746-00000852dc95","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.mips","pattern":"[url:value = 'http://46.151.182.200/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1da4d4fa-74ad-89a1-f86f-000078cad45f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.mips","pattern":"[url:value = 'http://46.151.182.200/dlr.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60b29897-04de-435e-ca00-000090dd3909","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/zy.sh","pattern":"[url:value = 'http://77.90.185.66/zy.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7056102b-3444-9ce1-7748-000008a40a4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.m68k","pattern":"[url:value = 'http://46.151.182.200/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d106b9f-295e-b3e8-4bee-000099871866","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.ppc","pattern":"[url:value = 'http://46.151.182.200/bins/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--383c9d65-a0b3-0d5b-9340-000051eac48d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.arc","pattern":"[url:value = 'http://46.151.182.200/dlr.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ec85d3c-9915-02cd-7445-000043ad30bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.i486","pattern":"[url:value = 'http://46.151.182.200/bins/bot.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5188e02c-50fd-bcfe-6d63-0000783c0285","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.m68k","pattern":"[url:value = 'http://46.151.182.200/dlr.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fd43154-b134-f1ef-b1b7-0000d820d282","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.mpsl","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08a72db0-f824-de13-b014-000059b0d712","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.arm6","pattern":"[url:value = 'http://46.151.182.200/bins/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df84b062-80a9-d8da-4a38-0000b135b3be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.arm","pattern":"[url:value = 'http://46.151.182.200/dlr.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a75d124b-5566-d6e3-0984-0000e5977ab2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/mirai.spc","pattern":"[url:value = 'http://77.90.185.66/mirai.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e96a7e5b-8f7a-55c5-6b32-000088445828","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.i486","pattern":"[url:value = 'http://46.151.182.200/bot.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a06f79d-0153-f03b-434a-0000b323bcc8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.mips","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0e516ad-e40f-3762-2576-0000e92e286d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.spc","pattern":"[url:value = 'http://77.90.185.66/miraint.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff11993a-6154-f609-3bea-000017b934b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.x86","pattern":"[url:value = 'http://77.90.185.66/miraint.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--060c5f6d-419a-b469-1cb8-000080ec106b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.arm5","pattern":"[url:value = 'http://46.151.182.200/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4b5ca40-8e49-ceda-9416-00000ef2b06d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.mpsl","pattern":"[url:value = 'http://77.90.185.66/miraint.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7455c716-5a79-00ee-530b-000073677eea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/mirai.m68k","pattern":"[url:value = 'http://77.90.185.66/mirai.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a51bac12-e49c-6eed-cf7b-00006303081c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/mirai.ppc","pattern":"[url:value = 'http://77.90.185.66/mirai.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd710331-859b-4b90-c3cc-0000ddf0d89d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.arc","pattern":"[url:value = 'http://77.90.185.66/miraint.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91ae7c0a-1c0f-c4e4-dbea-00004b0578fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.arm5","pattern":"[url:value = 'http://46.151.182.200/bins/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e0ac153-4226-c89a-3dc1-0000a8b8da48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.mpsl","pattern":"[url:value = 'http://46.151.182.200/bins/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfa51f68-6588-4ce7-f044-0000d9548600","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/link","pattern":"[url:value = 'http://46.151.182.200/link']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fa01d26-cb2e-feac-be50-0000e10cb077","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.arm7","pattern":"[url:value = 'http://46.151.182.200/bins/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fdcb857-535e-74dd-8688-00003efcc78b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.x86_64","pattern":"[url:value = 'http://46.151.182.200/dlr.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ee3d2fa-1019-d138-aa7f-0000c628a789","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/lilin.sh","pattern":"[url:value = 'http://77.90.185.66/lilin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39e05243-7c50-d2c4-3088-0000ae2daba0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/asus.sh","pattern":"[url:value = 'http://77.90.185.66/asus.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fac3acd-b37a-5ed5-0d20-000097c87178","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.spc","pattern":"[url:value = 'http://46.151.182.200/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52382f51-4bd5-45a8-c413-0000a3168188","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.arc","pattern":"[url:value = 'http://46.151.182.200/bot.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dea8494-b4fd-c52d-8756-0000115c03d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.ppc","pattern":"[url:value = 'http://46.151.182.200/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8761233-0502-0df5-f8cd-000013c9ba15","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.mpsl","pattern":"[url:value = 'http://46.151.182.200/dlr.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48c6726e-b9af-044f-d114-0000d931df3d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.arc","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08b866c3-5664-e5cf-d7b9-000091829a20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.sh4","pattern":"[url:value = 'http://46.151.182.200/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9dcce46-daab-1ad0-b3e0-00005a7dd02a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.arm7","pattern":"[url:value = 'http://46.151.182.200/dlr.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a5c076e-0c93-80a9-32bd-00009ba328a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.x86","pattern":"[url:value = 'http://46.151.182.200/dlr.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d4c8952-155c-4bc4-8182-00000e6591b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.i686","pattern":"[url:value = 'http://46.151.182.200/bins/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--125b1521-3668-58dd-b99b-000006f50703","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/a.out","pattern":"[url:value = 'http://77.90.185.66/a.out']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e7eed21-0e77-13e2-d428-00009194b8bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.arm7","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d4b385f-ccef-7ef7-1ab8-0000650708fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.m68k","pattern":"[url:value = 'http://77.90.185.66/miraint.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88a99ddc-1f15-2de4-4750-00001b006669","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/mirai.x86","pattern":"[url:value = 'http://77.90.185.66/mirai.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7f14aa3-09bf-ea6a-ad68-0000ef64c335","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.sh4","pattern":"[url:value = 'http://77.90.185.66/miraint.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b117719-55b2-ca1f-5edf-0000ed4f12d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.arm5","pattern":"[url:value = 'http://77.90.185.66/miraint.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaeeaa35-f4ff-b148-a8b9-0000c58cf923","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.i686","pattern":"[url:value = 'http://46.151.182.200/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a51f1635-fd72-cf53-2140-00004746da52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.arm7","pattern":"[url:value = 'http://77.90.185.66/miraint.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4aa6e865-ba20-caf5-c403-000013783316","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.x86","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30e79d1c-7d96-ed56-0fb4-00001bcb9c06","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/avtech.sh","pattern":"[url:value = 'http://77.90.185.66/avtech.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5058b55a-317e-681c-b3fd-0000695f6da3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.x86","pattern":"[url:value = 'http://46.151.182.200/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c62ac34b-f39c-a790-3802-0000b3d56a12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.m68k","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37dc253f-777f-b720-7804-0000bcd7a92c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.x86_64","pattern":"[url:value = 'http://46.151.182.200:8080/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7305699e-5f23-0aa3-c614-0000c7aef446","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.x86_64","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ea5ac1c-4ec1-9dce-7af2-00004544bb26","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://118.232.137.101:40783/bin.sh","pattern":"[url:value = 'http://118.232.137.101:40783/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31826d41-c3d6-6ac1-5e50-000056cb558e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://118.232.137.101:40783/i","pattern":"[url:value = 'http://118.232.137.101:40783/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90c92c4c-6274-2c45-8dd0-0000567f2020","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.x86_64","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0cd7d7c-6471-fcb0-3663-0000d6d96d8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.arm","pattern":"[url:value = 'http://46.151.182.200/static/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32c4faf2-99aa-0eb6-e2f6-0000306cedbc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.i486","pattern":"[url:value = 'http://46.151.182.200/static/bot.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7d4a054-0f1c-e4e8-ae9e-0000b07a6901","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.mips","pattern":"[url:value = 'http://46.151.182.200/static/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ae145e7-e4da-6912-6792-000002d8ea4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.spc","pattern":"[url:value = 'http://46.151.182.200/static/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dda2dbc4-2907-8ffe-9452-000038c4a5ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.arm5","pattern":"[url:value = 'http://46.151.182.200/static/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5206669d-1285-0986-9614-0000db79074b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.mpsl","pattern":"[url:value = 'http://46.151.182.200/static/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38306665-687b-18f8-54b3-0000af14b0d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.x86_64","pattern":"[url:value = 'http://46.151.182.200/static/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33acbae8-04ff-4459-876e-000092cd6d74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.arm7","pattern":"[url:value = 'http://46.151.182.200/static/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6890116a-d2b5-5124-d826-000012e0bb64","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.arm5","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4515ca70-38b9-6f8f-d9b4-0000fc4ff694","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.x86","pattern":"[url:value = 'http://46.151.182.200/static/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e734ac33-7609-81c8-69cd-0000f15d19d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.mpsl","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28cc50f5-cd79-8f4b-99b9-00006f102772","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.arm","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7408041-3572-6be7-feb0-0000c8717b25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.arm7","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a570cfc6-44f3-cd99-7c2d-00007d331544","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.arc","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88e4da5a-9c08-a7e9-0b30-000049ede5b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.spc","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42c8e2c1-4ea5-834e-0592-00009dec6277","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.arm","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a266485-2e33-0ec7-178f-0000c014b711","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.m68k","pattern":"[url:value = 'http://46.151.182.200/static/dlr.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95f43460-3a54-7b07-a6a8-0000bd5b4be9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.sh4","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2e0686e-782e-c1da-7124-0000bb11a0b1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.spc","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cacc2360-d42b-7fa7-171d-000090da77be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.x86_64","pattern":"[url:value = 'http://46.151.182.200/static/dlr.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d71e24f-50ff-c425-4b75-0000c4fa5fba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.arc","pattern":"[url:value = 'http://46.151.182.200/static/dlr.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52e66afa-83bc-975f-a0c4-00009a5e779a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.mips","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1df519e9-3637-adac-b1aa-000004920117","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.sh4","pattern":"[url:value = 'http://46.151.182.200/static/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1eca5e2c-266a-afef-0a11-00009aa8a140","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.m68k","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73389afd-03af-fbd4-bd8a-0000eac67f50","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.mips","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fff08654-58b1-1b26-8c2f-00004fa70eec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.sh4","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abf89482-fbda-f124-47d5-0000b08cbfdb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.m68k","pattern":"[url:value = 'http://46.151.182.200/static/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4775507b-e853-3a18-2233-000036061abf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.arc","pattern":"[url:value = 'http://46.151.182.200/static/bot.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0a6d637-87a9-494d-02d0-00003d85d21f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.ppc","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--869e7046-a228-2dbf-0698-0000b8e973ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.arm7","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a71055cd-39e2-c4e3-1a87-0000b77af96f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.x86","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8472e432-64ee-7477-d44b-00005780522c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.i686","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12724aef-e6e9-c0ad-dc55-0000e25565be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.arm7","pattern":"[url:value = 'http://46.151.182.200/static/dlr.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44ab8a7e-2c1d-373c-2092-00002a710a11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.arm6","pattern":"[url:value = 'http://46.151.182.200/static/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81f92c9b-4087-30fe-302d-0000f8603328","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.x86_64","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f19940d0-045d-bf54-cbcb-00000055148a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.arm6","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6ea5c34-991e-a793-0ed5-000081c5111a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.mpsl","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73d8969a-bb1e-197f-bcec-0000abe10f81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.mpsl","pattern":"[url:value = 'http://46.151.182.200/static/dlr.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87f6305c-b420-3f7c-601a-00001a48f327","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.i486","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cac9cf48-7cbb-5119-24ae-000024252889","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.arm","pattern":"[url:value = 'http://46.151.182.200/static/dlr.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77f1abdd-0443-6fc3-0276-0000f66e4412","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.sh4","pattern":"[url:value = 'http://46.151.182.200/static/dlr.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f117844-b6d5-7bf6-5e70-00000eb3b391","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.x86","pattern":"[url:value = 'http://46.151.182.200/static/dlr.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c60a5053-6233-d772-2658-0000c0e261cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.mips","pattern":"[url:value = 'http://46.151.182.200/static/dlr.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f14ae2b-2358-ee1c-a642-0000ea30a98a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.m68k","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf747df2-0a9b-851d-39fa-00008fcf5041","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.arc","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02a3498a-5ef8-0f54-0b6b-000076b0dde4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.ppc","pattern":"[url:value = 'http://46.151.182.200/static/dlr.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd14e7f9-5e75-7496-b046-00004586bc6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.x86","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00e5f7d3-acd6-f8c3-aba1-0000f024af4a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.spc","pattern":"[url:value = 'http://46.151.182.200/static/dlr.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31402e9c-703e-75a8-7336-00007da44cb7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.i686","pattern":"[url:value = 'http://46.151.182.200/static/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68a7fbbe-8e3a-4bbb-de01-0000844c98e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.ppc","pattern":"[url:value = 'http://46.151.182.200/static/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aa26403-87d1-1245-2bf6-0000cf79971a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.ppc","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d088babb-de3f-70c5-527b-0000c03419af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/script.sh","pattern":"[url:value = 'http://46.151.182.200:8080/script.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c245b4ef-a011-b1ae-cea4-0000d0d70c52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.arm7","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dc4b634-b0b7-6a57-797a-0000f9820748","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.sh4","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20d4580e-d55d-7c30-ee6b-00000d34a915","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.spc","pattern":"[url:value = 'http://46.151.182.200:8080/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa44f95b-c6ff-bbe6-e90e-000020505b28","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.mpsl","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ad0ea3a-1e1e-56f8-fc3c-0000ffc8ec10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.spc","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e48cf95-dd6d-6687-71a4-00003bcb3da8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.mips","pattern":"[url:value = 'http://46.151.182.200:8080/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5428479-db8c-219f-f37d-0000686b6b37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.arm6","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--570d0036-7b5c-e294-39bc-0000aa21a066","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.spc","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaf86095-dcb7-8f6c-5fe3-0000d9352ed6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.arm","pattern":"[url:value = 'http://46.151.182.200:8080/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a119a85-0d31-e69f-d50b-0000f296defd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.m68k","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a9915aa-1239-f03d-9863-00009eff5096","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.arc","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22aeb0e8-f111-55f6-2238-0000862ce4c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/link","pattern":"[url:value = 'http://46.151.182.200:8080/link']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--109da79e-6bce-18a4-9587-00006c031593","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.arc","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37e35e54-083e-a75e-7541-000082f800ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.mips","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8231989d-f1ee-f75d-7c15-0000e9fb6ea7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.mpsl","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--652465ad-3b62-090d-027c-0000015ff0cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.x86","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b9a095c-8867-c2e2-f5a5-000050c853e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.mpsl","pattern":"[url:value = 'http://46.151.182.200:8080/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d404d92-573f-cd1e-14c9-000039ea59e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.arc","pattern":"[url:value = 'http://46.151.182.200:8080/bot.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78f98fa1-f89e-42f1-dd4a-000054b6bcbd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.x86","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80fcd2a1-3314-2aa1-36bd-00002bc96bd3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.arm","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d37e5bf-b983-f9df-dbab-0000a1c05eb8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.arm6","pattern":"[url:value = 'http://46.151.182.200:8080/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62356949-b4ec-b906-df70-000069b1e74e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.x86_64","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57c00400-9e98-a886-444b-00000b7e424d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.sh4","pattern":"[url:value = 'http://46.151.182.200:8080/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f963f92-3c4e-2511-d100-00004b533562","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.mips","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78263b33-1a25-2571-f2be-00003ce474da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/lm","pattern":"[url:value = 'http://46.151.182.200:8080/lm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48965463-9ba8-4109-5071-0000795c9ebe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.ppc","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb589533-e831-3ae8-cedd-0000bbddb915","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.i486","pattern":"[url:value = 'http://46.151.182.200:8080/bot.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--043eb405-1e5b-cfa7-7a08-0000b375f156","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.arm5","pattern":"[url:value = 'http://46.151.182.200:8080/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e39b44e8-65ee-0195-ef7c-0000a04f0498","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.arm7","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12fd3d95-b9f2-0b3c-7338-0000a64af9b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.x86","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c520603a-8165-37fe-1b5d-000083196e42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.x86_64","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53ba0b44-c1c6-0a69-c74d-00004ba5e3b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.m68k","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbee252e-b578-670d-50d1-000069e43117","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.arm7","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--554bbe6f-a710-b035-e2c2-00002cb5d2c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.ppc","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bcf6a82-c066-560a-f5ba-0000820ed637","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.m68k","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c4bd5c3-b1dc-e3cd-a946-00007adec4d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.arm5","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0a9209b-8db5-484c-101f-00003fbe2d91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.i686","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a1dee0c-aea1-88be-80f6-00005e970e3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.sh4","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f4f0c5b-0f4b-b6ca-6181-0000de4997cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.ppc","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8dc415d-51cd-cb6e-0a79-0000f615181e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.i686","pattern":"[url:value = 'http://46.151.182.200:8080/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c32df4f5-fa20-6f36-7b43-000072768c9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.i486","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea30d529-f15f-7c39-4305-0000197c39dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.arm7","pattern":"[url:value = 'http://46.151.182.200:8080/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2292e657-369f-3bb4-1778-00008ba0dbbb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.ppc","pattern":"[url:value = 'http://46.151.182.200:8080/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7258a99-47fc-0e15-c26c-00008cdc62a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.arm","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6744ffa6-8746-8005-01c4-0000cb161ce0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.arc","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f20d799-6398-0d11-54d4-0000f3a3b5ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.x86","pattern":"[url:value = 'http://46.151.182.200:8080/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d09b202-889d-916e-5857-000058dde563","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.spc","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d2138ad-5ca8-d5ee-0e97-00007e2027a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.arm","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--163dae53-601b-df1a-8688-0000f2600827","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.mips","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3ef689a-e74d-bbb5-690b-00009963666d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.mpsl","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7264fb43-02f6-b9d4-d57f-00003b3deb72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.m68k","pattern":"[url:value = 'http://46.151.182.200:8080/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20195c38-d95c-115b-d9d7-0000ac6b4b3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.sh4","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68d5516c-4693-e559-1522-0000e0a23dcc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/pppc","pattern":"[url:value = 'http://31.77.227.121/bins/pppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c32555d0-f2cb-06d2-03f4-0000f5370d0b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/pm68k","pattern":"[url:value = 'http://31.77.227.121/bins/pm68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d87b33b-1a00-6f56-270a-0000607ca43a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/psh4","pattern":"[url:value = 'http://31.77.227.121/bins/psh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0bfd7ae-f969-e0d3-7f85-0000b237c8a1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/parm","pattern":"[url:value = 'http://31.77.227.121/bins/parm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f096106-fd47-10bf-58f4-0000f5c1dbd1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/pmips","pattern":"[url:value = 'http://31.77.227.121/bins/pmips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b57f1a96-99b3-0077-16a7-00007d7f172f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/parm5","pattern":"[url:value = 'http://31.77.227.121/bins/parm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--456760a2-9126-2a2c-bbe5-000098a153b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/px86","pattern":"[url:value = 'http://31.77.227.121/bins/px86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c764b2c-746e-3cd7-e7b7-00006fcab8c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/parm6","pattern":"[url:value = 'http://31.77.227.121/bins/parm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a93ef35-64b3-08be-aecc-000066364f62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/pspc","pattern":"[url:value = 'http://31.77.227.121/bins/pspc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b717bba-b046-9e15-5db9-0000d776dfa4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/parm7","pattern":"[url:value = 'http://31.77.227.121/bins/parm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3adba7cf-24ee-19c6-59ce-00009ec2b59b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/pmpsl","pattern":"[url:value = 'http://31.77.227.121/bins/pmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ee4b651-26ba-ac36-9889-00008cf02ef8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.84.54:40914/i","pattern":"[url:value = 'http://36.69.84.54:40914/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a01700e3-63ad-a066-094b-0000dc01ae30","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.84.54:40914/bin.sh","pattern":"[url:value = 'http://36.69.84.54:40914/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bae7ecfa-c194-5d98-59c2-000080807829","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://www-connect-secure-wellcfargo.sekolahkejarpaket.com/wellsfargo_new_obf_08.07.26.zip","pattern":"[url:value = 'https://www-connect-secure-wellcfargo.sekolahkejarpaket.com/wellsfargo_new_obf_08.07.26.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0430e0ca-d9a1-d039-cb5a-000010e9957c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.190.224.62:36692/i","pattern":"[url:value = 'http://196.190.224.62:36692/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1b0fceb-7cd2-8f01-dbd7-000022a96713","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_91b0a71f46718f87.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_91b0a71f46718f87.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e12396b-3ea2-6727-27b0-00004dc99d13","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_15b107e860013c5e.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_15b107e860013c5e.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b8bd0d3-48eb-5387-6caa-000080eb515b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/x86_64","pattern":"[url:value = 'http://31.77.227.121/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb6a8921-3adb-ae81-97dd-00008adfc286","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_670cab8529ccb18e.cmd","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_670cab8529ccb18e.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7b5d23e-0528-49d3-2b26-0000d2866d5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://joker.aec944b68370194a50.link:6556/ok","pattern":"[url:value = 'http://joker.aec944b68370194a50.link:6556/ok']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c754263-5abe-d443-55ab-00005cc7988f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.176.120.191:54769/bin.sh","pattern":"[url:value = 'http://42.176.120.191:54769/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88a829a0-0c03-e229-5145-0000b145ac77","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.54.39:38510/i","pattern":"[url:value = 'http://123.8.54.39:38510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77e7cee2-1735-ac8e-9fac-00003507cc0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://149.50.154.101:8000/zombie_scanner.sh","pattern":"[url:value = 'http://149.50.154.101:8000/zombie_scanner.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0aa6e3f-b39a-8e1d-15a5-0000163ceb7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://149.50.154.101:8000/bot_arm","pattern":"[url:value = 'http://149.50.154.101:8000/bot_arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc79cdd1-0018-92a0-d417-00002fb07aee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://149.50.154.101:8000/bot_arm7","pattern":"[url:value = 'http://149.50.154.101:8000/bot_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0801d76d-ab29-4b51-c537-00000d077e9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://149.50.154.101:8000/bot_mips","pattern":"[url:value = 'http://149.50.154.101:8000/bot_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5b3faf2-1c8e-81a0-d91d-0000fe0d09c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://149.50.154.101:8000/bot_mipsel","pattern":"[url:value = 'http://149.50.154.101:8000/bot_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21530e90-3bfc-f8bc-4dff-00006584d0bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1b2509","pattern":"[url:value = 'http://5.182.210.174/1b2509']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--213eb203-d7b0-7bf9-ed2d-0000e1a22a47","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/81d27b","pattern":"[url:value = 'http://5.182.210.174/81d27b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c350f6ca-d1bc-11dc-d0ee-000041c34134","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/785c9e","pattern":"[url:value = 'http://5.182.210.174/785c9e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d009ab9c-fa2a-b01b-70da-00003450d96c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/905d94","pattern":"[url:value = 'http://5.182.210.174/905d94']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23d8bb7b-10e4-ee0e-5b55-000023ebefa9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0f62ad","pattern":"[url:value = 'http://5.182.210.174/0f62ad']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bcebb5a-a9f2-8ec8-b947-0000eeb07657","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/becf65","pattern":"[url:value = 'http://5.182.210.174/becf65']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--393d9097-2e65-ae9d-c11d-000025032de9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/08bac6","pattern":"[url:value = 'http://5.182.210.174/08bac6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--881fae9e-1dd9-7114-74d0-0000be774c4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c0a2c7","pattern":"[url:value = 'http://5.182.210.174/c0a2c7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39108bd7-821d-ae15-6641-0000b97037c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/813df0","pattern":"[url:value = 'http://5.182.210.174/813df0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e2917f8-0513-03d5-4b11-000008907b62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/53ffdd","pattern":"[url:value = 'http://5.182.210.174/53ffdd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ddf6701-99ed-1f6e-14d8-0000c9641d21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c0589f","pattern":"[url:value = 'http://5.182.210.174/c0589f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--169437be-44e2-56cc-5ae7-00005cd361cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0d650b","pattern":"[url:value = 'http://5.182.210.174/0d650b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c017b42-b5a7-7e98-649c-00003ca48cb7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/567d74","pattern":"[url:value = 'http://5.182.210.174/567d74']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--387e8b1b-675c-4e94-5e15-00008bcf14bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/531853","pattern":"[url:value = 'http://5.182.210.174/531853']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2974784b-8ece-b960-40d1-00003837617d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/587199","pattern":"[url:value = 'http://5.182.210.174/587199']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d79aed6-2bed-50dc-78b7-0000642f54ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/4c2baf","pattern":"[url:value = 'http://5.182.210.174/4c2baf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a3167fb-2ea8-d000-f815-0000368524cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1067f5","pattern":"[url:value = 'http://5.182.210.174/1067f5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37aa2f8e-e30c-ca33-5a07-00003bc20188","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1d1847","pattern":"[url:value = 'http://5.182.210.174/1d1847']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a778702a-eff4-b38c-0c58-0000b04d06c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a2301d","pattern":"[url:value = 'http://5.182.210.174/a2301d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3240eabc-e33d-5436-586b-0000ea7f181e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d1882a","pattern":"[url:value = 'http://5.182.210.174/d1882a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36446718-37b4-b90a-487b-0000bd4ecfb9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ae64e3","pattern":"[url:value = 'http://5.182.210.174/ae64e3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03084e34-0a27-18a8-fb18-0000b735e258","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a5f61f","pattern":"[url:value = 'http://5.182.210.174/a5f61f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b9e67be-484a-265d-446e-000006bdd58c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bba45d","pattern":"[url:value = 'http://5.182.210.174/bba45d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fd3e098-46f8-a91a-64c5-000046d2dcfb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/110dc2","pattern":"[url:value = 'http://5.182.210.174/110dc2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--073636f5-5814-9f45-5369-000001dff07e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.232.72.245:48281/i","pattern":"[url:value = 'http://45.232.72.245:48281/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3309eb45-1907-6818-58c8-000046719835","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.193.113:47622/bin.sh","pattern":"[url:value = 'http://120.28.193.113:47622/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0042c6a4-f561-54b5-6ce7-00002f75e066","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.193.113:47622/i","pattern":"[url:value = 'http://120.28.193.113:47622/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24feea20-a158-cb2e-5b9e-000032afc717","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.57.92:43654/bin.sh","pattern":"[url:value = 'http://115.56.57.92:43654/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f6656e4-db8b-00d3-91e2-000012ad0312","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://apt-update.com/dl?%7B%22f%22%3A%22xr%22%2C%22t%22%3A%22b%22%2C%22p%22%3A%22lnx%22%2C%22a%22%3A%2264%22%2C%22e%22%3A%22aes%22%2C%22c%22%3A1%7D","pattern":"[url:value = 'http://apt-update.com/dl?%7B%22f%22%3A%22xr%22%2C%22t%22%3A%22b%22%2C%22p%22%3A%22lnx%22%2C%22a%22%3A%2264%22%2C%22e%22%3A%22aes%22%2C%22c%22%3A1%7D']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b125705-98b8-e44e-e373-0000f4fe3df5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.58.118.214:47643/bin.sh","pattern":"[url:value = 'http://42.58.118.214:47643/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e56d380-b096-6c2f-dbcb-00003d5e3c6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.130.196:43005/bin.sh","pattern":"[url:value = 'http://115.55.130.196:43005/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3f10f9e-b36f-fd3a-6e71-00004ed90ef2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.56.209.189:6556/ok","pattern":"[url:value = 'http://31.56.209.189:6556/ok']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e482aef-cd58-c2c1-6043-000041a4d797","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.130:6556/ok","pattern":"[url:value = 'http://31.77.227.130:6556/ok']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99b62ec2-d8cd-1f02-3e16-00004f58188c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.57.92:43654/i","pattern":"[url:value = 'http://115.56.57.92:43654/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e49d6c35-6f41-87cf-59b7-00009120a963","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.149.147:58354/i","pattern":"[url:value = 'http://42.224.149.147:58354/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d548f8fe-6ae2-c176-eb76-0000ef4eb9b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.168.189:41959/i","pattern":"[url:value = 'http://219.155.168.189:41959/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e6ce778-34a9-e693-613a-0000fbaf3430","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.130.196:43005/i","pattern":"[url:value = 'http://115.55.130.196:43005/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d2544ee-6e62-f6cd-50c0-0000881be65f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.51:46526/bin.sh","pattern":"[url:value = 'http://210.208.110.51:46526/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--134c072d-80ec-b484-1a87-0000f4c80b72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.125.9:33994/bin.sh","pattern":"[url:value = 'http://219.155.125.9:33994/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38a2f35d-0c76-3dee-0c9f-0000975b88cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.66.12:35690/bin.sh","pattern":"[url:value = 'http://123.9.66.12:35690/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef9b63e3-ff24-fe9a-2c8d-000076df5910","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://80.253.249.237:5001/dip.exe","pattern":"[url:value = 'http://80.253.249.237:5001/dip.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--453de80e-52d7-cb3c-366a-000030275d14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://42.53.3.62:57366/bin.sh","pattern":"[url:value = 'http://42.53.3.62:57366/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0860731-e1e9-ff23-0059-00009a457a7b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.168.189:41959/bin.sh","pattern":"[url:value = 'http://219.155.168.189:41959/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4545497f-6904-68ad-b9b7-00008cd62bd5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/df64a3","pattern":"[url:value = 'http://5.182.210.174/df64a3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dea911b-f7d1-a903-db50-0000cc80b95f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d9fc8c","pattern":"[url:value = 'http://5.182.210.174/d9fc8c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a197c36f-541e-0c4b-0440-000039414b78","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/8c2153","pattern":"[url:value = 'http://5.182.210.174/8c2153']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--648b0486-03d9-3427-b284-00000fc8bd54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ce4957","pattern":"[url:value = 'http://5.182.210.174/ce4957']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--415b748d-8cea-fea5-9bab-0000aa71f9b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7b2a6c","pattern":"[url:value = 'http://5.182.210.174/7b2a6c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--274d5aab-c1c0-94f6-9f14-000069627ffb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/878e23","pattern":"[url:value = 'http://5.182.210.174/878e23']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae78cf1d-4e6f-9bbf-3dcd-0000f23447ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cabc7a","pattern":"[url:value = 'http://5.182.210.174/cabc7a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fbb5a74-371d-2ecd-3083-0000bb695a67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a12c22","pattern":"[url:value = 'http://5.182.210.174/a12c22']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fdb5006-27d3-3ada-8a7d-00005b416f5b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2059d3","pattern":"[url:value = 'http://5.182.210.174/2059d3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--306d25ce-5bb9-d781-196f-0000b4b733d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/73c8e4","pattern":"[url:value = 'http://5.182.210.174/73c8e4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41de2f7e-0764-7847-19d7-0000d96ec70b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1ad6dd","pattern":"[url:value = 'http://5.182.210.174/1ad6dd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d66a88c-e8e8-ec57-c5f8-0000de56558b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a7a53e","pattern":"[url:value = 'http://5.182.210.174/a7a53e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87cb14cc-f7e3-448a-d7ef-00004edbe660","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.10.11/ePSDxHP52.bin","pattern":"[url:value = 'http://185.29.10.11/ePSDxHP52.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6427e730-a671-2eeb-e3c7-00006428701a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.10.11/Menneskevrdige.csv","pattern":"[url:value = 'http://185.29.10.11/Menneskevrdige.csv']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c784188a-e4f4-816c-1a99-0000701a045f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.131.48:48702/bin.sh","pattern":"[url:value = 'http://123.129.131.48:48702/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddc4177b-39b0-6bbb-7ad9-0000355840fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/oojcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/oojcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bde629c3-293a-54af-4c07-00006ab0b5ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/ugcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/ugcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2212531a-5a0d-f13e-a125-000087e81cf5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/PW/newcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/PW/newcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e6570e2-9066-819f-d57d-00004cf7addf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/HTTP/KDcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/HTTP/KDcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29da7776-0db8-3ad9-1a0e-0000a272859e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/ojdcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/ojdcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddde9dda-9d0e-cd9d-da99-0000d1ecfe11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/U1crypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/U1crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91cfa744-518f-f3aa-5c07-00006978952c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/ucrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/ucrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--310bb013-18ff-1506-8539-000099012f86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/akcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/akcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85e69140-5eff-5cb7-0df4-0000a5df34fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/Ecrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/Ecrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1efbd70-89a9-e68b-bbc6-0000c1590223","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/cryptede.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/cryptede.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3019f306-e664-7d4b-9120-0000ab012392","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/EZcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/EZcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dc55aa0-39f0-5a62-e937-000086549b72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/uucrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/uucrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5048f0cc-c766-629a-dbe0-0000007802c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/ojcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/ojcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d2bea45-514a-90a0-84e3-00008a0ae83e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/aaacrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/aaacrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94e340a5-9a35-f75a-05c2-0000e2bf2676","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://archivoscrosoft.com/newrem.png","pattern":"[url:value = 'http://archivoscrosoft.com/newrem.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--355d03a0-8b7d-7baa-6cf0-000013f96671","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/cat.sh","pattern":"[url:value = 'http://31.77.227.121/cat.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a0338dc-a4c3-001c-4515-0000fe736421","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.56.209.189:6556/k","pattern":"[url:value = 'http://31.56.209.189:6556/k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20df9246-94f4-8ba1-89bb-0000d57a9321","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://42.53.3.62:57366/i","pattern":"[url:value = 'http://42.53.3.62:57366/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f420da29-edad-0ad9-bfc0-000083533568","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.130:6556/k","pattern":"[url:value = 'http://31.77.227.130:6556/k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e2685b0-8d7c-7246-75c9-0000a5d15223","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.10.11/AFrlKy223.bin","pattern":"[url:value = 'http://185.29.10.11/AFrlKy223.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f82cdd4-fbc9-55ac-bae0-000003149302","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.10.11/Supersensitizing.hhk","pattern":"[url:value = 'http://185.29.10.11/Supersensitizing.hhk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c813dfa-792f-9cf4-6af8-0000bc7248ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.53.209.13:43098/i","pattern":"[url:value = 'http://115.53.209.13:43098/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8880f18-1677-91af-5399-000082b8a063","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.66.12:35690/i","pattern":"[url:value = 'http://123.9.66.12:35690/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdf1b047-e670-5a26-7a37-0000afdcb224","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-45a83f302a1943ed8d62418c2af947ef.r2.dev/img_071010.png","pattern":"[url:value = 'https://pub-45a83f302a1943ed8d62418c2af947ef.r2.dev/img_071010.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5371da7e-005f-99e2-7cc2-0000f6cc6c98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/tWVhP","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/tWVhP']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--326a4276-a32f-7633-72f9-0000cb22f4bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.10.11/vekselvises.asd","pattern":"[url:value = 'http://185.29.10.11/vekselvises.asd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e689d35-63b9-6be9-9331-000051507f86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.10.11/kLcvzhpr18.bin","pattern":"[url:value = 'http://185.29.10.11/kLcvzhpr18.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bece04a3-999b-56e2-d7da-000037f88c9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://firebasestorage.googleapis.com/v0/b/julyendingapama.firebasestorage.app/o/invergrace.png?alt=media&token=54ae32e9-1f20-404f-80a5-8fcc841a3c2b","pattern":"[url:value = 'https://firebasestorage.googleapis.com/v0/b/julyendingapama.firebasestorage.app/o/invergrace.png?alt=media&token=54ae32e9-1f20-404f-80a5-8fcc841a3c2b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6310ac7f-0520-e217-fdd1-0000b4de8921","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.148.152.143:8472/linux","pattern":"[url:value = 'http://8.148.152.143:8472/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--151f0a74-3dfc-b786-0a7f-0000d0696048","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://without.kesug.com/img_051425.png","pattern":"[url:value = 'https://without.kesug.com/img_051425.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83590611-bec1-b654-9bd5-0000ad7fc2bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.149.187:51152/i","pattern":"[url:value = 'http://115.56.149.187:51152/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad1a7734-d3bc-15e7-1bf2-00004a081e04","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/qgeUK","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/qgeUK']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--417e0c2c-9b9b-2fd5-9936-0000de29e95c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://essizs.com/img_170232.png","pattern":"[url:value = 'https://essizs.com/img_170232.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1c27458-0f49-e514-def2-0000a8e02529","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://204.44.69.222/75/wemadegoodthingsforbestforever.hta","pattern":"[url:value = 'http://204.44.69.222/75/wemadegoodthingsforbestforever.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bb2da34-6a57-b2d1-238c-000089acf7ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://2goelectricity.co.za/MSI_PRO.png","pattern":"[url:value = 'https://2goelectricity.co.za/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0714a329-7afb-96bf-95da-00005c1a0391","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://sumiko.vu/saraka/agent%20hype.bin","pattern":"[url:value = 'https://sumiko.vu/saraka/agent%20hype.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e71197e0-5356-bdac-69a4-00000924a9c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/aGdrz","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/aGdrz']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79a009a8-c18d-139f-6f8c-0000240951ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/kgvlI","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/kgvlI']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f8eb5e-2144-6cc0-f528-00009cb81668","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://media-aviation.run.place:8443/CjBbPzFu/t1b0nrg3.png","pattern":"[url:value = 'https://media-aviation.run.place:8443/CjBbPzFu/t1b0nrg3.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5141ecc-f887-38e1-970f-0000a258c1cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://38.180.221.132/GMT/PAPAcrypted.ps1","pattern":"[url:value = 'http://38.180.221.132/GMT/PAPAcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--698633aa-9abd-3e6a-b9fc-0000d029de54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.236.44.113:53976/i","pattern":"[url:value = 'http://109.236.44.113:53976/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--010494a3-da45-9060-f171-00003d082d91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.95.109:54758/i","pattern":"[url:value = 'http://182.126.95.109:54758/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b189c73-23ac-cd42-7248-00006c59cecc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.121.5.157/abc.sh","pattern":"[url:value = 'http://85.121.5.157/abc.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f183c01-a692-a3ce-9298-0000952bce1f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://83.68.248.254:34464/i","pattern":"[url:value = 'http://83.68.248.254:34464/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11229e6b-cf89-7cc9-888b-00008a56870e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://83.68.248.254:34464/bin.sh","pattern":"[url:value = 'http://83.68.248.254:34464/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aff66c82-c494-d7f0-29f3-00008b51f96d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.1.200:43003/bin.sh","pattern":"[url:value = 'http://110.36.1.200:43003/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--067f68fb-717e-27e4-70f7-00002079549b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://193.23.118.161/codu","pattern":"[url:value = 'http://193.23.118.161/codu']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f749494-5202-8003-8370-00004c29af26","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.186.130.68:34461/i","pattern":"[url:value = 'http://105.186.130.68:34461/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04584c89-41c8-c2cc-add9-000023eebc6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://101.109.243.237:40041/bin.sh","pattern":"[url:value = 'http://101.109.243.237:40041/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e6c75d9-5b3b-603e-6ca7-00006062ebff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://101.109.243.237:40041/i","pattern":"[url:value = 'http://101.109.243.237:40041/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d499666-6744-c3f2-3f89-0000903726e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.246.20.26:46242/bin.sh","pattern":"[url:value = 'http://112.246.20.26:46242/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c9a918b-b98f-d355-2fd3-000061967092","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.103.116.68:42561/bin.sh","pattern":"[url:value = 'http://59.103.116.68:42561/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8fcbf35-430f-3233-8874-000001806e4d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.114.153.10:37040/bin.sh","pattern":"[url:value = 'http://119.114.153.10:37040/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb2d54fa-a551-416e-a9ea-0000d72d7776","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.239.2:51852/i","pattern":"[url:value = 'http://112.198.239.2:51852/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28d7bf10-264a-d443-349b-000093ba13f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.228.207:54336/bin.sh","pattern":"[url:value = 'http://125.41.228.207:54336/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50424957-7e10-9598-ce7a-000024eca93b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://124.6.185.132:48257/i","pattern":"[url:value = 'http://124.6.185.132:48257/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--077a9fa3-3594-ff3a-5633-00006941a867","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.18.9.255:60894/bin.sh","pattern":"[url:value = 'http://60.18.9.255:60894/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17a007ab-4e6c-1352-ac70-0000b8ccc217","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.239.2:51852/bin.sh","pattern":"[url:value = 'http://112.198.239.2:51852/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62de2136-4b6d-97c3-4fcc-0000396436de","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.148.140:53929/i","pattern":"[url:value = 'http://115.48.148.140:53929/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70a5ae05-216a-8e25-5d6e-000064854135","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.148.140:53929/bin.sh","pattern":"[url:value = 'http://115.48.148.140:53929/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b40bdd6d-cf6f-b4cc-f01e-0000173d7fb3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.1.200:43003/i","pattern":"[url:value = 'http://110.36.1.200:43003/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e34e8fb-0bec-a9ab-1f9b-0000faf454b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.54.119:55125/i","pattern":"[url:value = 'http://125.44.54.119:55125/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8288530a-5e1e-8c86-2296-00008b14c57f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.130:40967/i","pattern":"[url:value = 'http://210.208.110.130:40967/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0d3c90f-50f0-7e73-b5df-0000fac8ed5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://180.191.122.115:56431/bin.sh","pattern":"[url:value = 'http://180.191.122.115:56431/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aca0a841-d2e5-e40b-502f-0000352637fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://111.164.68.144:57877/i","pattern":"[url:value = 'http://111.164.68.144:57877/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa51144b-26e5-b71a-afd0-0000ba7b9112","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.37.100.231:50864/i","pattern":"[url:value = 'http://27.37.100.231:50864/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76fd1cbf-7f0c-edb7-14d7-00001f0f2f09","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.192.200:49600/i","pattern":"[url:value = 'http://123.12.192.200:49600/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa4bac3d-b3f0-5fd6-0b55-00003b79586a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.227.174.167:52736/i","pattern":"[url:value = 'http://42.227.174.167:52736/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f7cfb84-b028-8665-78eb-0000bcb1f3ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.13.28:44703/i","pattern":"[url:value = 'http://115.63.13.28:44703/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d4b5596-26d3-0012-32fc-00002b2ab068","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.6.209.122:60543/i","pattern":"[url:value = 'http://42.6.209.122:60543/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6f72e2c-3f7d-da98-4916-0000edff940f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.7.146.107:39916/bin.sh","pattern":"[url:value = 'http://42.7.146.107:39916/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfc02b54-52cb-227e-5005-000072d7fca4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.107.16.92:47673/i","pattern":"[url:value = 'http://175.107.16.92:47673/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb5d1e30-a3b7-21a7-e005-00001186b243","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.14.209:33264/i","pattern":"[url:value = 'http://115.63.14.209:33264/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04967bad-b56e-91c8-f304-0000f0711dd5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://180.191.16.24:34228/i","pattern":"[url:value = 'http://180.191.16.24:34228/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--174522f5-ee0d-8150-a46c-0000e67d07bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.126.58:44400/bin.sh","pattern":"[url:value = 'http://27.215.126.58:44400/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0d5d4a1-e8eb-06b5-c47f-00003f215419","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.225.195:37800/bin.sh","pattern":"[url:value = 'http://219.155.225.195:37800/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88b295e6-39d1-ea40-0285-0000704045cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.26:56098/i","pattern":"[url:value = 'http://210.208.111.26:56098/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85d2da56-e13d-4875-e68c-00008f4d8944","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.225.195:37800/i","pattern":"[url:value = 'http://219.155.225.195:37800/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fd18ecd-553e-85e9-9777-000039d51715","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.248.117:34689/i","pattern":"[url:value = 'http://110.39.248.117:34689/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a11e3a8d-539a-e44a-7c1b-0000c23d2ec6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.124.253.104:42413/i","pattern":"[url:value = 'http://182.124.253.104:42413/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--827b9954-4ab6-1ea8-2d0c-0000f8975aa7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://118.34.109.121:35275/i","pattern":"[url:value = 'http://118.34.109.121:35275/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--043dd0f6-9460-01b4-c03c-00009c6fc3c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.50.133:53842/bin.sh","pattern":"[url:value = 'http://115.50.50.133:53842/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f282c0c6-23bd-5fca-a758-0000a9189aec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.31.72:58726/bin.sh","pattern":"[url:value = 'http://115.49.31.72:58726/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7e8d3fb-1555-0eef-570b-0000492325ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://140.237.37.41:59859/i","pattern":"[url:value = 'http://140.237.37.41:59859/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eee91af9-936d-559f-c034-00002798ad18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.112.245.250:41466/i","pattern":"[url:value = 'http://182.112.245.250:41466/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b6e27af-bef7-8915-4192-0000569da1f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.67.185:47193/i","pattern":"[url:value = 'http://115.49.67.185:47193/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e229be20-2468-2302-c0a4-0000f4cf18f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.231.173.181:58197/i","pattern":"[url:value = 'http://42.231.173.181:58197/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89579714-89bf-a3f5-182c-000024569601","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://180.191.122.115:56431/i","pattern":"[url:value = 'http://180.191.122.115:56431/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beaa945a-4460-54ba-b8b3-0000b673eb9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.231.67.26:56479/i","pattern":"[url:value = 'http://42.231.67.26:56479/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c6fa0a8-0445-176a-0bb3-00005017897a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://116.138.244.27:55282/bin.sh","pattern":"[url:value = 'http://116.138.244.27:55282/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20b4e76c-d420-e1ce-1298-000068886574","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.17.247:35288/i","pattern":"[url:value = 'http://219.155.17.247:35288/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b5da96f-eb5c-6fb9-c47d-0000dde2e371","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://140.237.37.41:59859/bin.sh","pattern":"[url:value = 'http://140.237.37.41:59859/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3e18d73-1eb6-29fe-2ea5-0000fbe1a79c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.206.197.243:34685/bin.sh","pattern":"[url:value = 'http://27.206.197.243:34685/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8da58e7a-5b5e-0b49-3993-0000aeac4a07","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.148.111.17:45464/i","pattern":"[url:value = 'http://175.148.111.17:45464/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e9f3589-1864-c00a-39d8-0000d813299c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.14.209:33264/bin.sh","pattern":"[url:value = 'http://115.63.14.209:33264/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eafc9a47-e981-e1fb-3329-0000be0602a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.7.146.107:39916/i","pattern":"[url:value = 'http://42.7.146.107:39916/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a010d4f1-1cbc-83c0-d301-0000b8934c96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://111.164.68.144:57877/bin.sh","pattern":"[url:value = 'http://111.164.68.144:57877/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70ae6c07-5f68-a518-db8c-0000091ff91f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.178.118.193:41764/bin.sh","pattern":"[url:value = 'http://78.178.118.193:41764/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00469f21-3993-9d54-9a01-0000a49f1b09","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://193.31.201.20:33068/bin.sh","pattern":"[url:value = 'http://193.31.201.20:33068/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2560add0-8e91-82fd-e094-00002fe4d347","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://193.31.201.20:33068/i","pattern":"[url:value = 'http://193.31.201.20:33068/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--331c3af1-99b6-760c-bcc5-000071d8de4c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://124.6.185.132:48257/bin.sh","pattern":"[url:value = 'http://124.6.185.132:48257/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2805daf5-3113-8285-b966-00004cc42da7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.50.133:53842/i","pattern":"[url:value = 'http://115.50.50.133:53842/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27ffacb5-ebba-19fc-c584-00001853651a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.67.185:47193/bin.sh","pattern":"[url:value = 'http://115.49.67.185:47193/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e27e0a22-7f9e-ea45-1bd6-000082ed6373","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.183.175:50468/bin.sh","pattern":"[url:value = 'http://123.14.183.175:50468/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--612ee0e3-d7e2-4d64-fe2e-0000dd7ad515","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.106.220:47631/bin.sh","pattern":"[url:value = 'http://110.37.106.220:47631/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b180caae-3160-c1c3-b746-0000fb3d8991","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.103.116.68:42561/i","pattern":"[url:value = 'http://59.103.116.68:42561/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ceaf5c6-4726-a9e5-49a3-00004840b1ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.179.35:50485/i","pattern":"[url:value = 'http://115.55.179.35:50485/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b1c1573-11ae-6fb5-6c25-0000817529d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://116.138.244.27:55282/i","pattern":"[url:value = 'http://116.138.244.27:55282/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10067444-f577-db49-f376-000021d57965","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.44.119:56483/bin.sh","pattern":"[url:value = 'http://110.37.44.119:56483/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d62b392-79f6-9b01-836f-000066b5d4b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://58.252.113.28:52617/i","pattern":"[url:value = 'http://58.252.113.28:52617/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e06604c-df8d-f8ea-d1ff-00000168ffc6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.44.119:56483/i","pattern":"[url:value = 'http://110.37.44.119:56483/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5713edf1-a712-aae0-14df-00002f1e9061","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://88.254.51.229:57095/i","pattern":"[url:value = 'http://88.254.51.229:57095/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e02391cc-39c1-dcec-13f0-0000a6fee043","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.238.173:38540/i","pattern":"[url:value = 'http://42.232.238.173:38540/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ca3c361-9e80-9a9f-079f-0000126b925a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.148.157.30:34623/i","pattern":"[url:value = 'http://175.148.157.30:34623/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--782f9ef6-1fcc-53f3-10c5-0000012cd079","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.137.193.167:52097/bin.sh","pattern":"[url:value = 'http://61.137.193.167:52097/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e1c21b3-5c90-6e08-72f3-0000abf04cc5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.26:56098/bin.sh","pattern":"[url:value = 'http://210.208.111.26:56098/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dc40850-7573-dc9d-72b1-0000cc1ae7e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.31.72:58726/i","pattern":"[url:value = 'http://115.49.31.72:58726/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13450eea-24bf-7537-bdb6-0000c836885a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.242.52:38396/bin.sh","pattern":"[url:value = 'http://115.63.242.52:38396/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cefc9e9-58ae-724e-6205-000078c83d03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.206.197.243:34685/i","pattern":"[url:value = 'http://27.206.197.243:34685/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d79cd375-cc51-7cf7-b4af-0000f5e0a671","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.123.108:59063/i","pattern":"[url:value = 'http://42.237.123.108:59063/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b60c6a35-53b5-2d88-a7c2-00004072ad65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.8.75:42853/i","pattern":"[url:value = 'http://115.48.8.75:42853/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--331190f2-e13e-d002-cf8c-000059c748cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.112.61.39:60395/i","pattern":"[url:value = 'http://125.112.61.39:60395/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a93551e3-6c8c-59f6-27a3-0000aac183c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.123.108:59063/bin.sh","pattern":"[url:value = 'http://42.237.123.108:59063/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ad88afd-03c5-de7a-5f3d-0000000e8f80","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.112.245.250:41466/bin.sh","pattern":"[url:value = 'http://182.112.245.250:41466/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52fe8548-4450-e864-4c80-0000960e2a91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.242.52:38396/i","pattern":"[url:value = 'http://115.63.242.52:38396/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--632e49c1-9c32-af78-f754-000099764039","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.114.153.10:37040/i","pattern":"[url:value = 'http://119.114.153.10:37040/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--349b1c24-ba39-c5e4-6270-00004a98bc37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://71.207.128.92:54954/bin.sh","pattern":"[url:value = 'http://71.207.128.92:54954/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0ad7489-7333-4f75-f417-0000f9a606f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.112.61.39:60395/bin.sh","pattern":"[url:value = 'http://125.112.61.39:60395/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0483798-a52d-db20-570c-0000ef76c5c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.46.213.70:47197/i","pattern":"[url:value = 'http://125.46.213.70:47197/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27dbadc5-9013-8695-5715-000069bad8da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.94.194.151:60883/i","pattern":"[url:value = 'http://124.94.194.151:60883/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--686d1696-6a65-1bf7-d62f-0000227329b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.221.231.180:37749/i","pattern":"[url:value = 'http://27.221.231.180:37749/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f85f118-fee6-d671-d3aa-00007636101a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.30.198:35585/i","pattern":"[url:value = 'http://123.13.30.198:35585/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fbdac37-a33a-58e1-333a-000062308a50","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.148.140.58:43457/bin.sh","pattern":"[url:value = 'http://123.148.140.58:43457/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8f1960a-397d-ece3-1a4b-000014402fd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.239.167.208:59256/i","pattern":"[url:value = 'http://42.239.167.208:59256/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12d7f6f7-0c22-dc8a-6ae5-00001eac21a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.148.140.58:43457/i","pattern":"[url:value = 'http://123.148.140.58:43457/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1049eaac-e193-fddf-d62b-00008f8503e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.8.75:42853/bin.sh","pattern":"[url:value = 'http://115.48.8.75:42853/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44f9c054-a10c-4295-8d72-000090585e70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.9.132.41:50484/i","pattern":"[url:value = 'http://175.9.132.41:50484/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cda74a2-e2e4-5c32-830f-000003df4bb4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.179.219:53168/i","pattern":"[url:value = 'http://182.121.179.219:53168/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7e9562b-9193-3fdc-60c2-0000f5594c56","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://58.252.113.28:52617/bin.sh","pattern":"[url:value = 'http://58.252.113.28:52617/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b76ea7f3-b701-4652-d530-000008b8eee1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.229.46.13:57947/i","pattern":"[url:value = 'http://113.229.46.13:57947/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f671a93c-d705-b34f-8016-000081c01fa6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://trueinggrik.com/QuickFetch.exe","pattern":"[url:value = 'https://trueinggrik.com/QuickFetch.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1d10bd1-cfd2-9a8c-2616-00006a1d21d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.68.170:52720/bin.sh","pattern":"[url:value = 'http://182.117.68.170:52720/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de28c8e3-02ca-3f52-41ce-00006944de35","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.240.173.194:59049/i","pattern":"[url:value = 'http://112.240.173.194:59049/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fed479b-4c5a-e081-25ce-000064b35587","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://180.191.16.24:34228/bin.sh","pattern":"[url:value = 'http://180.191.16.24:34228/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63febe48-30b6-1512-19df-0000aabcc598","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.240.173.194:59049/bin.sh","pattern":"[url:value = 'http://112.240.173.194:59049/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a823b098-0d77-6a2a-a954-000041d47384","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.106.249.19:11817/bin.sh","pattern":"[url:value = 'http://95.106.249.19:11817/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cfffcae-0d1b-58ad-bbc4-0000b29b7484","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.106.249.19:11817/i","pattern":"[url:value = 'http://95.106.249.19:11817/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--775984fc-9f25-df53-7faa-000005f07b72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://export.kesug.com/img_212250.png","pattern":"[url:value = 'https://export.kesug.com/img_212250.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef685e7a-17ff-23e4-9d28-0000ca413177","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.6.8:58160/bin.sh","pattern":"[url:value = 'http://42.235.6.8:58160/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58d5e8c9-972d-01cb-353c-00000a16b786","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.241/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.241/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c98e8365-80fd-cb07-2b14-0000a0c42903","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.238/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.238/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--858e96b1-93f1-e31a-d9c9-00001df152b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.238/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.238/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14d5fd1d-b68c-a8e0-c61a-0000b723cc32","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.241/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.241/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--735f38d6-ce44-a193-8e67-00009139fcc1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.244/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.244/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe887a5d-f38b-735d-cd77-0000a6a162dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.mipsel","pattern":"[url:value = 'http://94.154.43.76/miron.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--340d76ee-dae8-9a27-8f1c-000050de1afd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/a.sh","pattern":"[url:value = 'http://94.154.43.76/a.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13df92b2-61fd-3eca-e4d6-000067b7481e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/arm7","pattern":"[url:value = 'http://176.65.139.201/LjEZs/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72754ec7-194c-c137-340d-00002e032221","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/mpsl","pattern":"[url:value = 'http://176.65.139.201/LjEZs/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b8bbcd8-1d35-7b78-f59f-000045f69ab1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/m68k","pattern":"[url:value = 'http://176.65.139.201/LjEZs/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bd8b90e-4a15-dcb4-2337-000043e727e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/arc","pattern":"[url:value = 'http://176.65.139.201/LjEZs/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64d8a224-3900-b7fa-9242-0000df0b2f7b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/arm6","pattern":"[url:value = 'http://176.65.139.201/LjEZs/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b24f6eca-1e2b-d0f8-f764-000075534ca2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.armv7l","pattern":"[url:value = 'http://94.154.43.76/miron.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80790c48-0797-209e-df76-00000f931fc2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.armv5l","pattern":"[url:value = 'http://94.154.43.76/miron.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd1f39e-ebca-c8fb-e47b-0000cdbe8095","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/arm5","pattern":"[url:value = 'http://176.65.139.201/LjEZs/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0158f09c-336b-ced6-05cd-000071733c40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/sh4","pattern":"[url:value = 'http://176.65.139.201/LjEZs/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7a7880e-4ae3-bf6c-3795-000045004c6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/mips","pattern":"[url:value = 'http://176.65.139.201/LjEZs/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dd15b32-1585-3ecb-4cc2-00007b0212c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/x86_64","pattern":"[url:value = 'http://176.65.139.201/LjEZs/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc609409-255b-4b6f-1cda-0000a33850db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/arm","pattern":"[url:value = 'http://176.65.139.201/LjEZs/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--740a12cb-bccf-69bc-ea10-0000f1ada5b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/ppc","pattern":"[url:value = 'http://176.65.139.201/LjEZs/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7a292b1-6ca3-49b3-f416-00004b45fb62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.mips","pattern":"[url:value = 'http://94.154.43.76/miron.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3ee603a-9261-941e-5407-0000ffc581e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.x86_64","pattern":"[url:value = 'http://94.154.43.76/miron.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab545f8b-934b-2e5e-50b4-000048336512","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.armv6l","pattern":"[url:value = 'http://94.154.43.76/miron.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a483bb1d-bbc0-d276-c050-00009308d0c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.241.246/svchost.exe","pattern":"[url:value = 'http://217.60.241.246/svchost.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59b82305-5301-9c61-9ed7-000089aecbc3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/x86","pattern":"[url:value = 'http://176.65.139.201/LjEZs/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--764cac92-175c-d1b5-a9d2-00007739d718","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/spc","pattern":"[url:value = 'http://176.65.139.201/LjEZs/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99623d09-7e30-0c3e-3e80-000032f33672","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.armv4l","pattern":"[url:value = 'http://94.154.43.76/miron.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40de9b3c-0101-57f2-df20-00002ad9f518","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.6.8:58160/i","pattern":"[url:value = 'http://42.235.6.8:58160/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--917266c2-37ff-26d1-260f-0000ebf1db20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/main.exe","pattern":"[url:value = 'http://176.65.139.201/LjEZs/main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--904f095d-112f-5fe0-edf4-0000a7b31f95","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/debug_main.exe","pattern":"[url:value = 'http://176.65.139.201/LjEZs/debug_main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7583c63f-9370-9841-004c-000032504524","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/x86_64","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--487500dc-eda4-d231-0049-0000508a0c01","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/mpsl","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--554251cb-ea9c-bf77-ada7-000052fe70f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/debug_main.exe","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/debug_main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fda7c615-9fc4-4ff4-7df9-00003b89624b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/mips","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b44725fd-4943-6373-bfd7-00004921a14d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/sh4","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa62cf24-ed9a-4ead-17f9-000024ec60cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/main.exe","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--745bfd58-9091-8833-bb20-0000cb722d5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.201/LjEZs/debug.dbg","pattern":"[url:value = 'http://176.65.139.201/LjEZs/debug.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53a5ec7f-7991-a47e-d8d8-0000ffac8117","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.201/LjEZs/x86_64nosl","pattern":"[url:value = 'http://176.65.139.201/LjEZs/x86_64nosl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b18bf2c3-1c22-694b-435a-00003b7fb491","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/m68k","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--097f4168-7ffc-aa22-d0ba-00009b6acdd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/arm","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eec76c6f-92c3-1190-1faa-00007bb5bae5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/arc","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29dfdca9-e746-1f94-f429-0000193e663e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/arm7","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ed8ec3f-da74-33fe-f5ba-0000a182015b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/arm6","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f48b9849-413b-9ce9-f2f3-000048cfa9af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/x86_64nosl","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/x86_64nosl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eca7f664-3031-d711-c264-0000b1fc56ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/x86","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7d1bd85-5b54-dd96-a720-0000b337aeb5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/arm5","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c35379f3-281b-e48c-a924-00004f6b4a15","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/spc","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c115c7aa-a119-fbee-daa5-0000c9ff38bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/ppc","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6eb6c099-7c1d-bc3f-d501-0000ef4c0748","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.sh4","pattern":"[url:value = 'http://94.154.43.76/miron.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3436890b-c320-5e40-2f7d-0000ddd81ce0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.arc","pattern":"[url:value = 'http://94.154.43.76/miron.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c563717-7d5a-118c-fabf-0000ff10a4e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.sparc","pattern":"[url:value = 'http://94.154.43.76/miron.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb8158b4-4a8d-b975-06e5-0000defc7773","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.powerpc","pattern":"[url:value = 'http://94.154.43.76/miron.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62b2c817-26ce-15bd-01a4-0000cb537fdf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.i486","pattern":"[url:value = 'http://94.154.43.76/miron.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d09aabc-af01-8594-92f5-00001506ae20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/debug.dbg","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/debug.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb8ea667-6f7b-08f9-d1e2-00004bb32db8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.m68k","pattern":"[url:value = 'http://94.154.43.76/miron.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18f17f9e-6f8e-2e69-a4b5-000061e677ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.mipsrouter","pattern":"[url:value = 'http://94.154.43.76/miron.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0156c4a4-f8e3-b683-1c1a-000007995698","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.189.111.145:37976/bin.sh","pattern":"[url:value = 'http://60.189.111.145:37976/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df82d7c0-bf1d-1f5c-be58-0000a81662e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://joker.aec944b68370194a50.link:6556/k","pattern":"[url:value = 'http://joker.aec944b68370194a50.link:6556/k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c8952d1-401d-19b8-6c45-000064d41ef7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.189.111.145:37976/i","pattern":"[url:value = 'http://60.189.111.145:37976/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aba62983-9e21-dfec-6fac-00006cf679ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.238.178.200:43963/i","pattern":"[url:value = 'http://112.238.178.200:43963/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91bdc8ee-3d52-a582-ed4a-0000e1f92ae2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.228.78:49446/bin.sh","pattern":"[url:value = 'http://110.39.228.78:49446/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9d1daab-b69b-16eb-8b1c-0000ab583801","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.228.78:49446/i","pattern":"[url:value = 'http://110.39.228.78:49446/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9be8088f-b2f1-b328-7972-00007817f9ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/files/7646424755/gX8992r.bat","pattern":"[url:value = 'http://62.60.226.140/files/7646424755/gX8992r.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1764f6f-3f35-b2d9-e21a-0000797a4e81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.37.103.246:42822/i","pattern":"[url:value = 'http://27.37.103.246:42822/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c4784a5-ec66-352d-8522-00009c925325","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_de67bd60facbd66c.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_de67bd60facbd66c.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e33c49e2-3a52-7be6-60ba-000050c4c948","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.162.199.249/tzb10mmujurn","pattern":"[url:value = 'http://192.162.199.249/tzb10mmujurn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85b1818c-a5f3-13f6-d3a6-000082a78ddf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://192.162.199.249/y6b3fuzj0w6pt97e","pattern":"[url:value = 'http://192.162.199.249/y6b3fuzj0w6pt97e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12fa3049-0cba-101e-a529-00000913de02","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://154.90.70.23/x86","pattern":"[url:value = 'http://154.90.70.23/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de3a53a6-0fba-f3c8-085a-00007e19b387","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/m68k","pattern":"[url:value = 'http://176.65.139.228:6677/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df672c76-732b-434c-fdc4-00004eedcec6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/arm4","pattern":"[url:value = 'http://176.65.139.228:6677/bins/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b591a12b-953c-9038-b5fc-0000f07ac260","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/sh4","pattern":"[url:value = 'http://176.65.139.228:6677/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--466e7dcc-f2b4-5329-08a1-00005c586128","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/arm7","pattern":"[url:value = 'http://176.65.139.228:6677/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0c3437c-316c-c744-559e-000070a45b96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/ppc","pattern":"[url:value = 'http://176.65.139.228:6677/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31694d5a-9635-e7d5-f243-0000e4e4064d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/arm6","pattern":"[url:value = 'http://176.65.139.228:6677/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52af87b5-d075-190e-5c10-00000548c9f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.162.199.249/ezaenul9","pattern":"[url:value = 'http://192.162.199.249/ezaenul9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77f2041b-adba-f916-36e2-0000d3da5f7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.162.199.249/8w6vq50fsu","pattern":"[url:value = 'http://192.162.199.249/8w6vq50fsu']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35b86782-7782-66e6-ba02-0000f9c14cab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.162.199.249/1edjop4tlj2d","pattern":"[url:value = 'http://192.162.199.249/1edjop4tlj2d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31f8db96-9db1-c62d-158e-0000dc42e727","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://192.162.199.249/zeb8cgwmkkpvu7pc","pattern":"[url:value = 'http://192.162.199.249/zeb8cgwmkkpvu7pc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b38603e-d5b6-76cb-3d72-0000977c5e86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://192.162.199.249/1vo6lm4y50k3ww0f","pattern":"[url:value = 'http://192.162.199.249/1vo6lm4y50k3ww0f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2751215c-ff3f-29e1-3742-00000123e6dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://flooriscoveringworld.com/BOBBIN.exe","pattern":"[url:value = 'https://flooriscoveringworld.com/BOBBIN.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c07062e-078a-4a19-376b-00000e9b1c7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://207.189.4.110:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest","pattern":"[url:value = 'http://207.189.4.110:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1558f4c-d950-0583-7d35-00002aec1034","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://192.162.199.249/8jot5vdohds0imt4","pattern":"[url:value = 'http://192.162.199.249/8jot5vdohds0imt4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe878897-b540-acf9-1a5e-00008cacefe5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.219.139:36865/bin.sh","pattern":"[url:value = 'http://61.53.219.139:36865/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc69ef81-c621-77b2-4695-0000f909021a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.219.139:36865/i","pattern":"[url:value = 'http://61.53.219.139:36865/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7016cfd9-598c-f4a8-df98-0000ce9835b1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.146.6.50:52389/bin.sh","pattern":"[url:value = 'http://175.146.6.50:52389/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90859175-e7c0-6b72-cec4-000053c42371","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.73.174:46201/bin.sh","pattern":"[url:value = 'http://123.14.73.174:46201/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--388a4911-1173-90af-9edd-0000c54412a3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://80.67.33.209:34699/i","pattern":"[url:value = 'http://80.67.33.209:34699/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd49391c-8c62-fc6a-c7c8-0000e0ce6b89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.73.174:46201/i","pattern":"[url:value = 'http://123.14.73.174:46201/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eee7b6c-738a-d4f4-9062-00003ec21826","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.146.6.50:52389/i","pattern":"[url:value = 'http://175.146.6.50:52389/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9de07606-77dd-e13c-0a50-000029940589","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.53.59.112:44682/bin.sh","pattern":"[url:value = 'http://42.53.59.112:44682/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--415b1fb6-9265-5ebe-1212-0000044641af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.3.1:42472/bin.sh","pattern":"[url:value = 'http://196.189.3.1:42472/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95d3c2e3-1d54-1cd0-332b-0000b9c41d60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3f9c7b","pattern":"[url:value = 'http://5.182.210.174/3f9c7b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb44524c-9903-d4a4-fdcf-000074ca8bbe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/659716","pattern":"[url:value = 'http://5.182.210.174/659716']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d943da75-ed7e-01ad-451b-0000324ed273","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ec54e5","pattern":"[url:value = 'http://5.182.210.174/ec54e5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db4a6d7d-90a6-831a-762f-0000ee050312","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/5b5f1c","pattern":"[url:value = 'http://5.182.210.174/5b5f1c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09ba63bc-127c-4e52-be89-00005d562025","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/068f87","pattern":"[url:value = 'http://5.182.210.174/068f87']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac224e04-555a-6004-0d35-000048e5ceb1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/126678","pattern":"[url:value = 'http://5.182.210.174/126678']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6fd4525-3100-af37-6c80-000084f2f4a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b59af2","pattern":"[url:value = 'http://5.182.210.174/b59af2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dab20224-8872-50e5-3947-0000dc6b1b6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/341d04","pattern":"[url:value = 'http://5.182.210.174/341d04']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--448540d6-e59c-b867-c239-000010d934c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/085175","pattern":"[url:value = 'http://5.182.210.174/085175']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aa5b051-e969-3020-0b9e-0000db71f8ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f971dc","pattern":"[url:value = 'http://5.182.210.174/f971dc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b877778-91b9-78cc-5762-0000bd3685ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bfde3b","pattern":"[url:value = 'http://5.182.210.174/bfde3b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b794cac-3a75-ed72-5e88-0000510128a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2778ce","pattern":"[url:value = 'http://5.182.210.174/2778ce']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c108b07-68c3-769b-052b-000034f90243","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b0a2e4","pattern":"[url:value = 'http://5.182.210.174/b0a2e4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bf67f02-a8ce-2f2c-03ce-00000b8ba35b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9b2f83","pattern":"[url:value = 'http://5.182.210.174/9b2f83']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbd2c507-1e01-1142-8047-00002f69c303","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/27f7dd","pattern":"[url:value = 'http://5.182.210.174/27f7dd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3ae8bd9-f183-59dc-162c-00009f37849d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1096dc","pattern":"[url:value = 'http://5.182.210.174/1096dc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82f0bc36-0b5c-4825-aef6-0000215dcfa6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://154.90.70.23/arm5","pattern":"[url:value = 'http://154.90.70.23/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cfedd1a-d6c9-72cf-1e38-00008b54072d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://154.90.70.23/arm7","pattern":"[url:value = 'http://154.90.70.23/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c1d183c-e725-9cdc-9fec-0000381aad86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b318c0","pattern":"[url:value = 'http://5.182.210.174/b318c0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--439e708d-2f04-2199-9b89-000025130a8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a8ac8a","pattern":"[url:value = 'http://5.182.210.174/a8ac8a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3347e95f-c71c-47e2-59d4-0000f492b086","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/33d663","pattern":"[url:value = 'http://5.182.210.174/33d663']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d92c1251-75d3-54b1-6b49-0000d3241dc0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/be1fde","pattern":"[url:value = 'http://5.182.210.174/be1fde']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b886c7a6-3216-dba6-c15e-0000a9e30358","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://154.90.70.23/mips","pattern":"[url:value = 'http://154.90.70.23/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--411b488a-b852-e5fc-de55-0000aa11d758","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/eb2746","pattern":"[url:value = 'http://5.182.210.174/eb2746']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d82e8fb0-b191-8d44-f8e6-000051e5322d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/194957","pattern":"[url:value = 'http://5.182.210.174/194957']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97600ffc-eda2-70ac-5925-00008282b21a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/67f55e","pattern":"[url:value = 'http://5.182.210.174/67f55e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c594e6c-478b-a1ea-4345-0000c9f6fc6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c747be","pattern":"[url:value = 'http://5.182.210.174/c747be']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--661ff4f7-e723-9615-aef4-0000b92509d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.3.1:42472/i","pattern":"[url:value = 'http://196.189.3.1:42472/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5532ea74-ea86-d6c9-8d86-0000cbc8cf91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.57.44.181:56430/i","pattern":"[url:value = 'http://115.57.44.181:56430/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f13e747-73b8-492f-12f2-00001422fa71","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.186.231.45:33771/i","pattern":"[url:value = 'http://105.186.231.45:33771/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9d1a335-1572-9816-515f-0000a2286f44","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.136.66:59219/bin.sh","pattern":"[url:value = 'http://115.48.136.66:59219/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f86da0bb-6ac7-010d-1e7a-0000a079f5ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.dropbox.com/scl/fi/tpt9bauil4qjjmlp7zb67/Miner.exe?rlkey=uoovuvjd5i98iwns8q603dnu8&st=us1vcqua&dl=1","pattern":"[url:value = 'https://www.dropbox.com/scl/fi/tpt9bauil4qjjmlp7zb67/Miner.exe?rlkey=uoovuvjd5i98iwns8q603dnu8&st=us1vcqua&dl=1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c5f370f-bf3c-8511-0a85-000094f9eede","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.dropbox.com/scl/fi/e8fjth5km9ncp252hrjq5/main.exe?rlkey=mmcc5w15uphz2xehyvo3uir3k&st=o3g7rikz&dl=1","pattern":"[url:value = 'https://www.dropbox.com/scl/fi/e8fjth5km9ncp252hrjq5/main.exe?rlkey=mmcc5w15uphz2xehyvo3uir3k&st=o3g7rikz&dl=1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33d26c3c-8f4f-da9d-aa1d-00007892ce3a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.136.66:59219/i","pattern":"[url:value = 'http://115.48.136.66:59219/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--830ed02e-ad62-a112-8455-0000a025c6df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.68.188:46150/i","pattern":"[url:value = 'http://182.117.68.188:46150/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59aae0c9-4858-a07e-0d63-000002755122","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://138.204.196.136:51078/i","pattern":"[url:value = 'http://138.204.196.136:51078/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac9c1449-f837-39fb-eaf2-00005c2afb77","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.214.85:32896/bin.sh","pattern":"[url:value = 'http://120.84.214.85:32896/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cac6a726-847c-b3bf-cb53-00005bf7329d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.214.85:32896/i","pattern":"[url:value = 'http://120.84.214.85:32896/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2349ff24-793f-6095-b246-00005716aff7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.120.72.79:33457/i","pattern":"[url:value = 'http://182.120.72.79:33457/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5bbb9bc-681b-78b4-1a1c-000051863dda","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.185.241.8:44283/bin.sh","pattern":"[url:value = 'http://119.185.241.8:44283/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--176b9e53-e241-22d4-59af-0000af2eca14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.185.241.8:44283/i","pattern":"[url:value = 'http://119.185.241.8:44283/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9d728e9-15f6-578f-a02d-000017af4785","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://83.168.69.141/p.sh","pattern":"[url:value = 'http://83.168.69.141/p.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc2dbe79-748c-94d6-e0d7-000090cfc9ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.225.56.37:44489/bin.sh","pattern":"[url:value = 'http://42.225.56.37:44489/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7b4859d-927f-b0a3-5a2f-00008b457561","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.225.56.37:44489/i","pattern":"[url:value = 'http://42.225.56.37:44489/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f21e1f45-ee53-9b47-0850-0000b572398a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.54.109/rvn.exe","pattern":"[url:value = 'http://178.16.54.109/rvn.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fba5bde-9506-a6a2-fd79-0000019a8386","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.54.39:38510/bin.sh","pattern":"[url:value = 'http://123.8.54.39:38510/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0e88501-9210-9269-d449-00001d91296d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_19e674e25adc5a91.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_19e674e25adc5a91.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02ccd071-7843-03b4-e32c-0000b2af0c4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.35.172:48818/i","pattern":"[url:value = 'http://196.189.35.172:48818/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40b498b6-9f77-e438-3df0-00004031b0cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://163.142.94.15:56422/i","pattern":"[url:value = 'http://163.142.94.15:56422/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17fee29e-8895-8448-4551-000035b69e36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3d10f3731e453661.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3d10f3731e453661.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cda73828-c16a-0e1d-0c30-00009d05d88b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_c6d8c2a5c91fb3df.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_c6d8c2a5c91fb3df.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--278e7475-6a8e-d8e4-8d03-0000e71ffde7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.93.89.72/wget","pattern":"[url:value = 'http://185.93.89.72/wget']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a33844ca-7798-4dcc-4d98-0000d4596404","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_bd1adaff26b8305d.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_bd1adaff26b8305d.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--102ca43c-4cf4-055a-0df1-000021b44c44","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3636b8ab0c149e71.cmd","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3636b8ab0c149e71.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf40cd4e-75df-200f-a419-000086fa0d38","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3fe5ed2d30d53a73.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3fe5ed2d30d53a73.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a36910d-6b21-ae80-b622-00005b4ef805","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://151.241.154.105:8888/1/iokasg181fteasmm.nce","pattern":"[url:value = 'http://151.241.154.105:8888/1/iokasg181fteasmm.nce']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6882a095-ac8e-4c21-a74a-0000a21f6138","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://151.241.154.105:8888/1/ueyasmgyetaq241.mwn","pattern":"[url:value = 'http://151.241.154.105:8888/1/ueyasmgyetaq241.mwn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc547c44-9e86-cebf-d76c-00006c69c319","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/hjada.png","pattern":"[url:value = 'https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/hjada.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10f38155-ceb6-e5bc-cd10-0000982da349","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/hrr.png","pattern":"[url:value = 'https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/hrr.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8caa97b6-bf86-9489-995c-00003da691ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/45fb7d","pattern":"[url:value = 'http://5.182.210.174/45fb7d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8169458-9f19-86c8-7a4a-00007720c051","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1cc53b","pattern":"[url:value = 'http://5.182.210.174/1cc53b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8db67581-e201-4e6c-0fe5-000064cbaf9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/140e8d","pattern":"[url:value = 'http://5.182.210.174/140e8d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93fa924b-dbe7-44c0-123a-000096a6d486","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/86361f","pattern":"[url:value = 'http://5.182.210.174/86361f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5539491-ecd2-7b58-e122-0000efe8d8dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/938392","pattern":"[url:value = 'http://5.182.210.174/938392']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06237a6a-5864-d293-0f41-0000c681eb50","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3cea41","pattern":"[url:value = 'http://5.182.210.174/3cea41']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3315ae1-ff58-5205-b73b-00004ddc4a1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/989926","pattern":"[url:value = 'http://5.182.210.174/989926']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c701a77a-d890-aa1a-f5f3-00003b51b257","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/340ea0","pattern":"[url:value = 'http://5.182.210.174/340ea0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7403d89b-b390-65d9-b6e6-0000d5d80c66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a041d7","pattern":"[url:value = 'http://5.182.210.174/a041d7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b98ae7f-ee1b-b0a5-0b43-0000658be0d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2d085b","pattern":"[url:value = 'http://5.182.210.174/2d085b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30d89e8f-ce95-38e5-f24d-000079d5e451","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b60846","pattern":"[url:value = 'http://5.182.210.174/b60846']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09191158-9afb-2b04-10bd-0000a16bb17f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a2fa8f","pattern":"[url:value = 'http://5.182.210.174/a2fa8f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c02e57f7-616a-634f-0c2e-00006dd1e667","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b94fb7","pattern":"[url:value = 'http://5.182.210.174/b94fb7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43cb5917-6f1b-94ce-5122-00008ad00d3d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cddd60","pattern":"[url:value = 'http://5.182.210.174/cddd60']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2491f318-4efe-f0b3-06e3-00005edaa6ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/11ac33","pattern":"[url:value = 'http://5.182.210.174/11ac33']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04e9f3f2-0b7b-3a07-6b63-0000a4710ab6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/428768","pattern":"[url:value = 'http://5.182.210.174/428768']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5b42979-8324-4848-aa90-0000271cfeba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7d27e5","pattern":"[url:value = 'http://5.182.210.174/7d27e5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3864f346-6574-40e0-97e4-0000f52fa3db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/533721","pattern":"[url:value = 'http://5.182.210.174/533721']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d00cf28-4e3d-d3c2-ec68-00008e4a991a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/83792e","pattern":"[url:value = 'http://5.182.210.174/83792e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3390cab-fb63-4720-a2b9-0000d2eb3098","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e5e3a4","pattern":"[url:value = 'http://5.182.210.174/e5e3a4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c022128b-88fd-a0bc-157b-0000b4828038","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/55a639","pattern":"[url:value = 'http://5.182.210.174/55a639']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dec07c45-edd4-9b3f-4d1c-00009ac9fe11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ced603","pattern":"[url:value = 'http://5.182.210.174/ced603']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99163c40-766b-b208-8d11-000003cb0459","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/818df1","pattern":"[url:value = 'http://5.182.210.174/818df1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--979641f9-76a1-9f23-e988-0000be6d4553","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.127/miron.sh4","pattern":"[url:value = 'http://217.60.195.127/miron.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ff989ce-6ef9-ed07-b75a-000041679771","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.127/miron.i486","pattern":"[url:value = 'http://217.60.195.127/miron.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3141626-2918-d9cb-c1b2-0000cef41ee5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.127/miron.sparc","pattern":"[url:value = 'http://217.60.195.127/miron.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c04822f-3195-2405-f353-0000c9bf7adf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.127/miron.mipsrouter","pattern":"[url:value = 'http://217.60.195.127/miron.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6c5e7be-e447-f4fc-1029-0000c187c516","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.127/miron.m68k","pattern":"[url:value = 'http://217.60.195.127/miron.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71b5b01a-691c-d3c5-5133-0000ba098ac2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.127/miron.powerpc","pattern":"[url:value = 'http://217.60.195.127/miron.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf89588e-aa9f-3051-ab44-0000f9db9f33","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bd412f","pattern":"[url:value = 'http://5.182.210.174/bd412f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d805ea1a-e969-3b85-f4c7-0000313c8c39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2c819f","pattern":"[url:value = 'http://5.182.210.174/2c819f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41a8269b-827f-62cb-efb7-00001ee3ba00","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e19e6a","pattern":"[url:value = 'http://5.182.210.174/e19e6a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8807631c-89a4-5b23-51ff-000031feb2f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ae1209","pattern":"[url:value = 'http://5.182.210.174/ae1209']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b49bf9a9-d7cc-e40c-f2e1-0000807c33cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/820635","pattern":"[url:value = 'http://5.182.210.174/820635']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70d5a6ba-3825-abb0-12ce-0000325b032c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/85c412","pattern":"[url:value = 'http://5.182.210.174/85c412']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d244a60-17aa-0a98-756d-00008a34cdcd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/eb1880","pattern":"[url:value = 'http://5.182.210.174/eb1880']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--080072b6-30d6-bdee-8a34-000028acdc70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3f7598","pattern":"[url:value = 'http://5.182.210.174/3f7598']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56520bb9-7a99-d070-744c-000058686974","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ea1763","pattern":"[url:value = 'http://5.182.210.174/ea1763']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a843a6e7-1ffc-a46a-82a7-00004f538866","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c1da29","pattern":"[url:value = 'http://5.182.210.174/c1da29']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c82efabf-75e8-74da-f8bc-000008f1f8b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/446eba","pattern":"[url:value = 'http://5.182.210.174/446eba']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3978c144-96e5-45d2-9cf0-00000fda7f8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d1832e","pattern":"[url:value = 'http://5.182.210.174/d1832e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11576a1c-e65b-8546-95f7-00008b5758d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/935428","pattern":"[url:value = 'http://5.182.210.174/935428']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ea0732f-768d-8224-28e4-000015a3cde0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://162.246.26.77:54746/i","pattern":"[url:value = 'http://162.246.26.77:54746/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8136a7f-aa72-a853-f7ce-0000b077a898","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://15.204.176.145/xmrig.exe","pattern":"[url:value = 'http://15.204.176.145/xmrig.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e42fd61-0884-6bf5-2ab2-000084a35b9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://87.120.104.147/d/build_x64","pattern":"[url:value = 'http://87.120.104.147/d/build_x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af2342f0-f4d9-548e-7f40-0000219a6a24","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://frtkvnpa.xyz/crypted.ps1","pattern":"[url:value = 'https://frtkvnpa.xyz/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b4ee807-6e58-9b81-a2ec-0000f6fa4603","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/ojkcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/ojkcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0ccd6fe-28a2-38a5-211f-00000e9cf7b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.127.64.81:42389/bin.sh","pattern":"[url:value = 'http://182.127.64.81:42389/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--841fb122-8b03-42b9-f0c8-0000bf6945a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.127.64.81:42389/i","pattern":"[url:value = 'http://182.127.64.81:42389/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09531390-cd6e-3e87-49fa-00009ae8bc8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_888f9e1e66545fd5.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_888f9e1e66545fd5.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb033d36-2de1-1c7d-3a36-00002771c543","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cdn.discordapp.com/attachments/1537290261195919382/1537290376740741220/Vozolomis_Setup_1.2.6.exe?","pattern":"[url:value = 'https://cdn.discordapp.com/attachments/1537290261195919382/1537290376740741220/Vozolomis_Setup_1.2.6.exe?']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef1b0713-02e0-efd3-8212-00002f320743","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://luxcar-24.com/zWqbElslFazLfVduLvpacFLw9SplKs3pV4aUiEUv/Update.exe","pattern":"[url:value = 'https://luxcar-24.com/zWqbElslFazLfVduLvpacFLw9SplKs3pV4aUiEUv/Update.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e686e3a1-a63e-fb8a-0f83-00005d44f425","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mbcasesores.com/tap/BBVA_pdf.zip","pattern":"[url:value = 'https://mbcasesores.com/tap/BBVA_pdf.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e470077-46ae-966c-1367-00004d70ef36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.13.229:39029/i","pattern":"[url:value = 'http://110.36.13.229:39029/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f56018c1-d605-4e7b-46bd-0000abb2402d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.61.107.237:53984/bin.sh","pattern":"[url:value = 'http://115.61.107.237:53984/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ad04935-f973-877a-a377-000071be4467","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.190.133.180:47068/bin.sh","pattern":"[url:value = 'http://196.190.133.180:47068/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--451c9414-7f1c-100f-878d-0000ee755d16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.96.138.212:48972/bin.sh","pattern":"[url:value = 'http://59.96.138.212:48972/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f027648-7c3d-0164-2fc8-00001d942615","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.96.138.212:48972/i","pattern":"[url:value = 'http://59.96.138.212:48972/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f856849d-b320-e08e-dfd0-0000dc5ac77b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.122.193.178:41991/bin.sh","pattern":"[url:value = 'http://182.122.193.178:41991/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--817ed422-6c43-9c25-80ad-00009d568b81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.122.193.178:41991/i","pattern":"[url:value = 'http://182.122.193.178:41991/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e714258-0440-4ada-7121-0000739456e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.239.221:32941/bin.sh","pattern":"[url:value = 'http://115.52.239.221:32941/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab40c9de-dadf-6c75-41e8-00001f8570a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.121.142/a3f8d2/kaizen.arm","pattern":"[url:value = 'http://196.251.121.142/a3f8d2/kaizen.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f44332e-aa5d-c230-720e-0000437fce62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.156.154.3:40709/i","pattern":"[url:value = 'http://27.156.154.3:40709/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bb34f84-02d9-bc89-25d3-000037c34785","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.156.154.3:40709/bin.sh","pattern":"[url:value = 'http://27.156.154.3:40709/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b405e4b0-5495-2f81-de34-00007b50796d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.31.103.204:42349/bin.sh","pattern":"[url:value = 'http://103.31.103.204:42349/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d0c8acf-8df6-c1c9-0017-0000a65fa834","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.231.9.63:39328/i","pattern":"[url:value = 'http://113.231.9.63:39328/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--405af7c0-9ef6-14dd-b13f-0000b59a1c3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.61.107.237:53984/i","pattern":"[url:value = 'http://115.61.107.237:53984/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0551682b-e7e4-8023-a264-000071266c67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.115.246.124:41208/i","pattern":"[url:value = 'http://119.115.246.124:41208/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07521553-f222-434b-4f3e-0000285c038c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.117.59:58546/i","pattern":"[url:value = 'http://182.126.117.59:58546/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae9b44c8-dfb4-1ea3-ef22-000098024235","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.117.59:58546/bin.sh","pattern":"[url:value = 'http://182.126.117.59:58546/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8cf8967-c934-d338-167b-0000587464e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.31.103.204:42349/i","pattern":"[url:value = 'http://103.31.103.204:42349/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ee6d220-8c9c-0bbb-c85f-0000365ce3d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://24.95.54.96:47647/i","pattern":"[url:value = 'http://24.95.54.96:47647/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0092fb28-fe9f-0b62-5e3e-00002b6198e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://211.158.166.117:51581/bin.sh","pattern":"[url:value = 'http://211.158.166.117:51581/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--189faae8-52a6-34b2-2f5f-000067df1e18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://24.95.54.96:47647/bin.sh","pattern":"[url:value = 'http://24.95.54.96:47647/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db9d4b0c-5938-3d66-7a0f-0000605fc526","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.70.213:38527/i","pattern":"[url:value = 'http://42.224.70.213:38527/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ee221c3-1b1f-6edb-d306-0000a504fb1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.138.249.233:41996/bin.sh","pattern":"[url:value = 'http://116.138.249.233:41996/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aad21749-2ff3-6d25-4700-0000e663c425","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.122.152:46868/i","pattern":"[url:value = 'http://123.14.122.152:46868/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b87c2cbc-71e9-b3f2-2e55-000058b014db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.130.213:51777/i","pattern":"[url:value = 'http://123.129.130.213:51777/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f35b7db2-8e2e-928d-5cf5-00005484e0e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.80.147:46406/i","pattern":"[url:value = 'http://123.13.80.147:46406/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--288767f1-c83a-5764-0ce1-00001910b782","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.55.83:33095/bin.sh","pattern":"[url:value = 'http://115.55.55.83:33095/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe32a482-6e22-909d-8fbe-0000147ba2d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.118.107:60191/i","pattern":"[url:value = 'http://222.137.118.107:60191/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c211ded0-f4bd-fb7b-262d-00000cf4b83f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.165.71.238:57573/i","pattern":"[url:value = 'http://175.165.71.238:57573/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--363f3b01-faf2-77c3-d248-00007f60edaa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.20.6:57418/bin.sh","pattern":"[url:value = 'http://115.50.20.6:57418/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56664bf2-b1fc-b5fe-cbe3-0000f56ab0e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.10.230.104:46320/i","pattern":"[url:value = 'http://123.10.230.104:46320/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--690fe372-7414-3044-5f80-000046ef4447","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.131.216:52075/bin.sh","pattern":"[url:value = 'http://115.55.131.216:52075/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d925b8b-afc2-ab02-a8f6-00005e58c735","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.148.216.12:43983/i","pattern":"[url:value = 'http://123.148.216.12:43983/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70da5c47-de85-8e8c-b772-0000f1abf709","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.142.211.115:43071/i","pattern":"[url:value = 'http://222.142.211.115:43071/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab8c4408-05c1-3772-18f6-00008a7e51b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.93.139.79:39515/i","pattern":"[url:value = 'http://112.93.139.79:39515/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f6f9577-5411-164e-3866-000074f339b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.115.173.117:58187/i","pattern":"[url:value = 'http://182.115.173.117:58187/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b759b38-811a-3086-98ea-00006cd427bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.214.37:35671/i","pattern":"[url:value = 'http://120.84.214.37:35671/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b42a93d6-6157-2096-2afb-0000fca51c97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.234.119:59998/bin.sh","pattern":"[url:value = 'http://115.52.234.119:59998/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8b27a70-03c3-33a2-ad2e-000050386efa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.130.213:51777/bin.sh","pattern":"[url:value = 'http://123.129.130.213:51777/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1cf24f7-b7bf-a140-3a2e-0000bece1ead","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.147.158.185:45619/i","pattern":"[url:value = 'http://175.147.158.185:45619/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff92d2dd-63ce-c136-c2b0-0000dc28b6c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.131.164.138:48771/bin.sh","pattern":"[url:value = 'http://124.131.164.138:48771/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4ecd6ae-f923-6874-5279-0000594ef9ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.24.217.164:45145/i","pattern":"[url:value = 'http://117.24.217.164:45145/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe4ce5e4-83b6-e0d3-fb79-000006fe373e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.209.244.81:39731/i","pattern":"[url:value = 'http://115.209.244.81:39731/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0674594f-73b4-ae96-dfb2-0000b3a1dc6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.131.164.138:48771/i","pattern":"[url:value = 'http://124.131.164.138:48771/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcff472a-5ea6-2b59-88a8-00005396b06b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.183.53.105:35057/i","pattern":"[url:value = 'http://119.183.53.105:35057/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3e77872-501a-ef83-7383-00007a8b7d66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.239.223.235:54830/i","pattern":"[url:value = 'http://113.239.223.235:54830/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdb75142-301f-3482-944a-000071cd5687","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.239.223.235:54830/bin.sh","pattern":"[url:value = 'http://113.239.223.235:54830/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb9efe06-28a7-f18d-4cd9-00006d734ba7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.77:39424/i","pattern":"[url:value = 'http://196.189.98.77:39424/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4efb68f9-cd8f-3a40-6956-0000c928c784","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.73.44.67:44345/bin.sh","pattern":"[url:value = 'http://39.73.44.67:44345/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11c60ca4-9d3d-873d-566f-0000f4b5988a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.189.247:57147/i","pattern":"[url:value = 'http://115.55.189.247:57147/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9267163e-a7e4-298a-7117-000015cdcc8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.68.26:55093/i","pattern":"[url:value = 'http://182.117.68.26:55093/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c7983b7-cd1e-5ead-9303-00000d10af57","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.156.93.123:50459/i","pattern":"[url:value = 'http://219.156.93.123:50459/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2024832f-aaed-d18b-ff22-0000ebca6b0a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.124.47:46095/bin.sh","pattern":"[url:value = 'http://123.5.124.47:46095/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95a70a56-f06e-f9f5-f178-00002e1ac9f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.207.247.91:45741/i","pattern":"[url:value = 'http://27.207.247.91:45741/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2cd339f-3a0c-9280-e1e2-00001387619c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.120.4.111:56629/i","pattern":"[url:value = 'http://182.120.4.111:56629/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1031a12-8827-17af-407b-0000c2f09910","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.179.219:53168/bin.sh","pattern":"[url:value = 'http://182.121.179.219:53168/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e79d5d2-7932-297f-3ae0-0000afed5cac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.207.247.91:45741/bin.sh","pattern":"[url:value = 'http://27.207.247.91:45741/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13379293-b30c-e955-1c36-0000f0e90e83","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.156.93.123:50459/bin.sh","pattern":"[url:value = 'http://219.156.93.123:50459/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbd4eb65-eb2a-62fc-4445-0000865e7074","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.224.69.71:54203/i","pattern":"[url:value = 'http://105.224.69.71:54203/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae4c6477-505b-8211-3498-0000db3398cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.124.47:46095/i","pattern":"[url:value = 'http://123.5.124.47:46095/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01eaaf07-9405-7ace-1078-00009879f86a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.147.248.132:46446/i","pattern":"[url:value = 'http://175.147.248.132:46446/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--394e7641-e16f-cdab-f3db-00006d2f1087","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.195.40:53219/i","pattern":"[url:value = 'http://112.198.195.40:53219/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a987e109-32b0-768f-e0ad-0000cf1eaaa6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://36.48.28.98:35726/bin.sh","pattern":"[url:value = 'http://36.48.28.98:35726/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47e56d36-b55d-6d07-8d39-0000d4a3dfd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.120.4.111:56629/bin.sh","pattern":"[url:value = 'http://182.120.4.111:56629/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4852ce6a-69b2-9ac3-2a52-0000612ac108","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.146.92.46:40975/i","pattern":"[url:value = 'http://117.146.92.46:40975/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71b9d3d2-4ef6-fb15-04ea-000062d33975","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.30.67:40773/i","pattern":"[url:value = 'http://123.8.30.67:40773/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac687dd2-2879-4ba8-b1c3-0000a3834a8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.80.26:40670/bin.sh","pattern":"[url:value = 'http://115.55.80.26:40670/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5618e4bb-08f0-c837-1b9e-00001403fab7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.121.20:34150/i","pattern":"[url:value = 'http://115.49.121.20:34150/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc7f3903-3e65-6265-2a1e-0000380e1a1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.127.54.168:47860/i","pattern":"[url:value = 'http://182.127.54.168:47860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bf7928e-b51b-1f6d-d3c9-00007f73fc18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.229.171:36842/i","pattern":"[url:value = 'http://219.155.229.171:36842/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4518711c-471f-498c-104f-0000c402cf1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.65.125:37575/i","pattern":"[url:value = 'http://115.52.65.125:37575/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1329fc56-751d-053e-2a2b-000066fc2162","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.159.154.179:49141/bin.sh","pattern":"[url:value = 'http://27.159.154.179:49141/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24d3377a-458f-dc4d-31c1-000022cd8b56","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.184.6.71:46382/bin.sh","pattern":"[url:value = 'http://119.184.6.71:46382/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c25ce3c0-d587-c1aa-c611-000072576edc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.156.184.4:33396/bin.sh","pattern":"[url:value = 'http://219.156.184.4:33396/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8933f8a0-6b08-7cae-4d5a-00004ebb12e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.131.216:52075/i","pattern":"[url:value = 'http://115.55.131.216:52075/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bba139a-4713-4a43-73e5-00004ea963e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.136.5.189:45058/i","pattern":"[url:value = 'http://110.136.5.189:45058/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a682359-cb87-3d7c-b266-00006adbceb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.53.209.13:43098/bin.sh","pattern":"[url:value = 'http://115.53.209.13:43098/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74866c31-2d3c-a4c3-62d3-00001c4cc8c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.106.241.72:39541/i","pattern":"[url:value = 'http://176.106.241.72:39541/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--492ee127-b94a-8223-2735-000052c7dae0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.2.24:55703/bin.sh","pattern":"[url:value = 'http://123.129.2.24:55703/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceb5ee0c-9137-11bf-0d5a-0000869a2565","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.11.28:36844/bin.sh","pattern":"[url:value = 'http://123.11.11.28:36844/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3c0d69c-0c37-a641-8db7-00004c79a4b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.234.38:33146/i","pattern":"[url:value = 'http://182.113.234.38:33146/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b8a8add-bfae-b841-9e6c-0000bd26f969","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.193.5:34195/i","pattern":"[url:value = 'http://112.198.193.5:34195/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cf491ad-b013-1309-c422-0000f75c069f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.123.46:35446/i","pattern":"[url:value = 'http://27.215.123.46:35446/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dbabbf8-44aa-166d-b048-000063244aba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.55.83:33095/i","pattern":"[url:value = 'http://115.55.55.83:33095/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd0d22fd-b56f-f5f0-b7a6-000090699f6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.198.107:45304/i","pattern":"[url:value = 'http://115.55.198.107:45304/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59dc52e5-9b9b-f9bc-8780-00005cb7f695","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.209.244.81:39731/bin.sh","pattern":"[url:value = 'http://115.209.244.81:39731/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dc4a3e9-6432-9bf4-dd25-00004b66476f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.241.88:59418/i","pattern":"[url:value = 'http://115.52.241.88:59418/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--825402a8-ffdb-e0b0-9ee1-00007d2dbe9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.104.54:56510/i","pattern":"[url:value = 'http://112.248.104.54:56510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68eb0bb6-d447-f876-6ca3-0000e189255f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.224.99:37425/i","pattern":"[url:value = 'http://125.43.224.99:37425/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a35c0028-4c23-d53b-ef5a-0000a0f54f8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.227.39:56994/bin.sh","pattern":"[url:value = 'http://115.55.227.39:56994/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3abc6a7d-e421-d2d2-b9de-0000f59ac21d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.80.147:46406/bin.sh","pattern":"[url:value = 'http://123.13.80.147:46406/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48f842a2-0f75-41be-492c-00005fa39b41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.220:36372/bin.sh","pattern":"[url:value = 'http://210.208.111.220:36372/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a66b861-83d2-6ac4-dfc5-000035ae047e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.239.113.122:44773/bin.sh","pattern":"[url:value = 'http://112.239.113.122:44773/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc95c9e4-8d6d-66dd-ce69-0000c0c036c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.230.81.126:50462/bin.sh","pattern":"[url:value = 'http://113.230.81.126:50462/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0791e46f-452d-7cb7-e11e-00000ae75c8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.88.114:47055/bin.sh","pattern":"[url:value = 'http://123.14.88.114:47055/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78523110-6168-b512-1107-0000ab68d1cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.20.6:57418/i","pattern":"[url:value = 'http://115.50.20.6:57418/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54bc382b-35b1-b986-2b27-00001526afa7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://37.78.176.5:45921/Mozi.m","pattern":"[url:value = 'http://37.78.176.5:45921/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35e77548-62e1-ffc9-6d07-0000e6d9638b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.80.26:40670/i","pattern":"[url:value = 'http://115.55.80.26:40670/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c383941b-a1c1-0a18-b98b-000085999478","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.231.9.63:39328/bin.sh","pattern":"[url:value = 'http://113.231.9.63:39328/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a6361d3-0b7b-84dc-0294-0000d3e4a459","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.239.113.122:44773/i","pattern":"[url:value = 'http://112.239.113.122:44773/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d3e76e0-5803-2a50-b364-0000e59056d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.30.198:35585/bin.sh","pattern":"[url:value = 'http://123.13.30.198:35585/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49e4d2ce-3a7a-db34-8693-00007b2e7f51","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.12.14:38104/i","pattern":"[url:value = 'http://221.15.12.14:38104/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a903a4e-d44c-081f-5be7-00005bd4a873","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.115.67.89:44844/i","pattern":"[url:value = 'http://182.115.67.89:44844/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c788283-610a-aae5-f8b9-0000406ee3dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.234.119:59998/i","pattern":"[url:value = 'http://115.52.234.119:59998/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b073c176-40a0-59f8-4e34-0000bfe79775","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.158.38:53457/bin.sh","pattern":"[url:value = 'http://222.137.158.38:53457/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3269aa0a-6761-dd50-2e44-000099674dd5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.118.107:60191/bin.sh","pattern":"[url:value = 'http://222.137.118.107:60191/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80419a25-c6c4-dfa9-c765-00004085d2b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.88.114:47055/i","pattern":"[url:value = 'http://123.14.88.114:47055/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edccb81f-f542-ea4e-9021-00005dc20b25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.183.53.105:35057/bin.sh","pattern":"[url:value = 'http://119.183.53.105:35057/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88743f2d-cfa6-308a-ee31-0000cb550f8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.70.213:38527/bin.sh","pattern":"[url:value = 'http://42.224.70.213:38527/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75ea64fa-e59d-4846-b4fb-00000d6b1618","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.99.104:58376/bin.sh","pattern":"[url:value = 'http://42.224.99.104:58376/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f31a01fe-b0f5-45c2-5edd-0000af55d3bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.68.26:55093/bin.sh","pattern":"[url:value = 'http://182.117.68.26:55093/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6264dd02-8d15-5a93-53d1-000089bb8fb1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.51.196.94:57935/i","pattern":"[url:value = 'http://115.51.196.94:57935/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd739f83-dd37-0afb-2918-000028d05699","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.157.187:43642/i","pattern":"[url:value = 'http://42.230.157.187:43642/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c32545db-d543-635b-5727-0000b3a0f0bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.57.44.181:56430/bin.sh","pattern":"[url:value = 'http://115.57.44.181:56430/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9043af08-7dc9-6ddc-9f65-00003c2fa48a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.158.38:53457/i","pattern":"[url:value = 'http://222.137.158.38:53457/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa181ca0-b85a-1660-5abc-0000d815dd3f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.10.124:37933/i","pattern":"[url:value = 'http://182.116.10.124:37933/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04c8af6b-43d9-f09a-e926-00000cd48bcf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.130.28:46269/i","pattern":"[url:value = 'http://196.189.130.28:46269/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b59c9c6-b437-c6c3-c1be-000069db2a60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.138.249.233:41996/i","pattern":"[url:value = 'http://116.138.249.233:41996/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dc0f71f-1f3b-6e16-8d97-000023951414","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.165.71.238:57573/bin.sh","pattern":"[url:value = 'http://175.165.71.238:57573/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--207d629a-1fd9-389d-f18f-00007d8d7c0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.51.196.94:57935/bin.sh","pattern":"[url:value = 'http://115.51.196.94:57935/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb1ec47c-b11e-a58b-00fc-0000fc04fb48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.138.102.135:34775/i","pattern":"[url:value = 'http://222.138.102.135:34775/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fb6076a-a407-f8a9-05bc-0000dc758ba9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.224.117.178:50959/i","pattern":"[url:value = 'http://105.224.117.178:50959/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d907592d-aeba-af38-648b-000031fee37a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.202.24.36:37993/i","pattern":"[url:value = 'http://27.202.24.36:37993/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0018b629-5de9-998c-1a5f-00006219a9a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.10.124:37933/bin.sh","pattern":"[url:value = 'http://182.116.10.124:37933/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f5e2e0d-744b-d04b-ad02-00007b7aa37d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.99.104:58376/i","pattern":"[url:value = 'http://42.224.99.104:58376/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b7054af-9ebc-89d1-dc91-0000a880b6d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.41.107:34572/i","pattern":"[url:value = 'http://125.43.41.107:34572/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ba95a5e-7a1d-4e7b-c98e-00007d0ae8ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.47.216.30:39421/i","pattern":"[url:value = 'http://125.47.216.30:39421/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0ec352c-70c0-70fb-78c0-0000ceac966f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.77:39424/bin.sh","pattern":"[url:value = 'http://196.189.98.77:39424/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bc35129-e305-7f6c-0003-00006227c7c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.159.154.179:49141/i","pattern":"[url:value = 'http://27.159.154.179:49141/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49843208-ce9d-7ac8-afd4-0000fdc00717","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.86.0:36944/i","pattern":"[url:value = 'http://110.36.86.0:36944/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aca68e2-eb74-7c05-c756-000088858b7b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.38.201.196:57604/i","pattern":"[url:value = 'http://110.38.201.196:57604/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89b6d28d-1093-a1b0-48f7-00008c977cd0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.137.193.167:52097/i","pattern":"[url:value = 'http://61.137.193.167:52097/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bae7dc0-10f0-e641-ea98-0000ce265a21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://83.228.109.209:51502/bin.sh","pattern":"[url:value = 'http://83.228.109.209:51502/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e720ba54-d920-7a07-5e27-0000ba87a5df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.60.75.209:50077/bin.sh","pattern":"[url:value = 'http://78.60.75.209:50077/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1c688e0-0412-0895-93c2-0000dcc9e019","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://83.228.109.209:51502/i","pattern":"[url:value = 'http://83.228.109.209:51502/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--944454b3-5385-8b5a-db5c-00009c0818aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.60.75.209:50077/i","pattern":"[url:value = 'http://78.60.75.209:50077/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c90e84b-3ea1-06e4-1518-0000ee11cd23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.152.192:37513/i","pattern":"[url:value = 'http://61.53.152.192:37513/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--992d34a7-c9a1-bcf6-e84b-0000d6b4a150","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.91.100:38645/i","pattern":"[url:value = 'http://42.233.91.100:38645/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad5beb32-e5ad-6ff3-7ece-000092aad6a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.104.208:40542/bin.sh","pattern":"[url:value = 'http://42.233.104.208:40542/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ef4c9c8-8df2-b158-6150-0000cb22d81a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.83.85:60110/i","pattern":"[url:value = 'http://42.237.83.85:60110/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0e2fde8-be33-71e3-67f2-0000bc91d8e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.23.233.154:43712/i","pattern":"[url:value = 'http://60.23.233.154:43712/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--980a0c38-c703-84a6-f7bf-0000926e570c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.58.42.29:40746/i","pattern":"[url:value = 'http://59.58.42.29:40746/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb35e500-b411-9dcc-d489-000081cc86df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.114.165:55640/i","pattern":"[url:value = 'http://61.52.114.165:55640/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddf05026-a736-6719-4109-0000cfb0d069","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://87.202.82.19:60523/i","pattern":"[url:value = 'http://87.202.82.19:60523/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--522aacb3-c7ed-1144-7976-0000ea673f86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.57.201.222:50295/bin.sh","pattern":"[url:value = 'http://42.57.201.222:50295/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--702ffbd0-9d1a-050b-eafd-0000256675c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.57.201.222:50295/i","pattern":"[url:value = 'http://42.57.201.222:50295/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--593e637b-1a8b-2cd6-4bef-00002363e789","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.59.226.215:51916/i","pattern":"[url:value = 'http://42.59.226.215:51916/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--748b9dd3-0153-c70a-a5e0-0000c53c604c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.59.226.215:51916/bin.sh","pattern":"[url:value = 'http://42.59.226.215:51916/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab009f55-44e3-17e1-4d61-000068d83f8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.11.28:36844/i","pattern":"[url:value = 'http://123.11.11.28:36844/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35047732-df87-ab9b-81c6-0000b48a5f4d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.72.56:41711/bin.sh","pattern":"[url:value = 'http://61.53.72.56:41711/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78bec07e-9cac-16e9-678b-00004d3a4949","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.231.67.26:56479/bin.sh","pattern":"[url:value = 'http://42.231.67.26:56479/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02202e01-3cf1-83ae-5776-0000c5dd067f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://82.114.181.233:33360/i","pattern":"[url:value = 'http://82.114.181.233:33360/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d72b2c8-1cde-79fa-cffb-000003325ee1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.58.118.214:47643/i","pattern":"[url:value = 'http://42.58.118.214:47643/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e14e18d-1874-3c00-dedb-00004024dbe3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.43.180:36905/bin.sh","pattern":"[url:value = 'http://42.235.43.180:36905/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39f5b951-5981-ccce-4dc9-000061d81272","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.43.180:36905/i","pattern":"[url:value = 'http://42.235.43.180:36905/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--433827fe-259a-2af7-b256-0000b9eb11cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.104.208:40542/i","pattern":"[url:value = 'http://42.233.104.208:40542/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbcef2f7-c2df-ce96-49d9-00001eab4cc8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.91.100:38645/bin.sh","pattern":"[url:value = 'http://42.233.91.100:38645/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--127a2389-6011-ad34-44fc-000014eb8af0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.162.218.63:58599/bin.sh","pattern":"[url:value = 'http://60.162.218.63:58599/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b9b0f17-51e2-846c-49f6-00000d5aa6d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.72.56:41711/i","pattern":"[url:value = 'http://61.53.72.56:41711/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2efde2f-4764-6455-b75b-0000e86953f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.238.168.22:33430/i","pattern":"[url:value = 'http://42.238.168.22:33430/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b524d0a8-ab5f-b6c8-4585-00009e26680d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.211.213.219:35115/i","pattern":"[url:value = 'http://117.211.213.219:35115/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5663e368-2b38-e173-993e-0000135a4fad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.211.213.219:35115/bin.sh","pattern":"[url:value = 'http://117.211.213.219:35115/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f855e7aa-5a99-038c-f5b7-00002aa75db0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.37.101.221:42822/i","pattern":"[url:value = 'http://27.37.101.221:42822/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5906984f-10ca-4ca8-9707-0000df4b2a2d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.1.225.130:45357/i","pattern":"[url:value = 'http://221.1.225.130:45357/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3257bf6-6b5e-73dd-e6fb-0000c2f03e45","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.226.6.169:40695/i","pattern":"[url:value = 'http://105.226.6.169:40695/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdbd06d0-235e-808f-bc3f-00009a7518e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.165.110.211:41723/bin.sh","pattern":"[url:value = 'http://175.165.110.211:41723/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c240de9c-63ec-efae-6141-00006918adf9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.165.110.211:41723/i","pattern":"[url:value = 'http://175.165.110.211:41723/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33cf168f-b360-50e8-d3dd-0000095c73d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/aktcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/aktcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61376b3e-5b54-7b73-947f-0000e4379a36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/UDcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/UDcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e95818b-3404-8b1a-15d3-0000bbeb7f40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/EEcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/EEcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f51c5d1-ad6a-e549-5a2f-0000d2dc58ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/uzcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/uzcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fce6e81f-404f-dd80-3bb2-00003cc29fb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://drive.google.com/uc?export=download&id=1QchDs5jxVrNvFZZwTe-lhTxkqAZ4dqNo","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1QchDs5jxVrNvFZZwTe-lhTxkqAZ4dqNo']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a047008-0971-4e6b-d1a1-0000d237a9c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_ae96d08e0e89cde9.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_ae96d08e0e89cde9.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fd08581-5257-2bfa-7a76-0000d4a68a8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/log","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/log']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65b29c10-55b1-f0d5-73ac-000010cbf10d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/syst3md","pattern":"[url:value = 'http://ten.devurek.xyz/syst3md']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87d7c219-f077-7107-c419-000006fa2f6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/cli","pattern":"[url:value = 'http://ten.devurek.xyz/cli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89b5ecad-1c5b-fea0-9406-00006c1670f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/proot","pattern":"[url:value = 'http://ten.devurek.xyz/proot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b62e5f2-eaaa-f4fc-a244-0000c283e5d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/oldboss","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/oldboss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--401efbe0-064e-2b07-4ca8-000050d3905b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/log","pattern":"[url:value = 'http://ten.devurek.xyz/log']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c58d8426-e8ba-6d34-a666-00000450ddeb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/cliaarch","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/cliaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0351d79f-e060-ce8a-0e00-0000d02c88da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/oldboss","pattern":"[url:value = 'http://ten.devurek.xyz/oldboss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--753593ee-5d1a-52df-0d07-00005bd5a58b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/boss","pattern":"[url:value = 'http://ten.devurek.xyz/boss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42eee5be-e9ec-f61c-16ec-00005f0d5e20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/proot","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/proot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f696aaf1-be33-0330-2dd2-00000df43ead","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/cliaarch","pattern":"[url:value = 'http://ten.devurek.xyz/cliaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f8f0c5e-7b2a-b9f1-8757-000043e697e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/boss","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/boss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4e338b0-5797-1b62-9dc3-00001fb4b473","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/main","pattern":"[url:value = 'http://ten.devurek.xyz/main']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce59a700-008d-855a-559f-00000787861e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/main","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/main']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1b80426-91d0-89cb-4bf4-000069608187","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/wd1337","pattern":"[url:value = 'http://ten.devurek.xyz/wd1337']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb7228ea-80cd-b859-e354-0000b355aed9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/Error84","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/Error84']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d81ae7d-ecc5-32dd-a793-000002649c01","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/syst3md","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/syst3md']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3411a87-7372-7d4a-bb09-0000a1fac3d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/Error84","pattern":"[url:value = 'http://ten.devurek.xyz/Error84']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8819bc78-8b45-1173-2a0c-0000828f35ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/cli","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/cli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83f3dd78-89ac-7498-0115-0000beb66431","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://mnurlogistics.az/ind8inc/crypted.ps1","pattern":"[url:value = 'https://mnurlogistics.az/ind8inc/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1170746b-be69-c79a-647e-0000aba2acb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://glbeletronica.com.br/wp-content/admin/#","pattern":"[url:value = 'https://glbeletronica.com.br/wp-content/admin/#']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35bb3375-2e51-58ee-c267-00000e94e014","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://malaysianpastrybakery.org/crypted1.ps1","pattern":"[url:value = 'https://malaysianpastrybakery.org/crypted1.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4a07d28-72b2-d20c-7c79-00008e6ff641","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/oldboss","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/oldboss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c1759ec-0fcd-8e13-6578-0000bc240f3c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/boss","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/boss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bb79bed-9188-96dc-16eb-000092fc7388","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.57.200:55698/i","pattern":"[url:value = 'http://123.8.57.200:55698/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3747d74-c7f3-9056-b1d8-00006a77371f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/cliaarch","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/cliaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64675331-801a-d437-b75a-0000939f3001","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://glbeletronica.com.br/wp-content/admin/bin44.exe","pattern":"[url:value = 'https://glbeletronica.com.br/wp-content/admin/bin44.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1bbf1be-c1a1-ca73-ad3d-00006aa22cfd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://glbeletronica.com.br/wp-content/admin/TELEG.exe","pattern":"[url:value = 'https://glbeletronica.com.br/wp-content/admin/TELEG.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8e4b240-0b5e-f533-3c07-0000f57822cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://rcf.co.mz/Forbes.exe","pattern":"[url:value = 'https://rcf.co.mz/Forbes.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d04367a-0514-bfa2-8b1d-00002361fd19","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://my-buck01.s3.cubbit.eu/A/silv-rawfileupload%20(2).txt","pattern":"[url:value = 'https://my-buck01.s3.cubbit.eu/A/silv-rawfileupload%20(2).txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfbbea79-f886-4433-4b36-0000577467cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://my-buck01.s3.cubbit.eu/A/am11binupload.txt","pattern":"[url:value = 'https://my-buck01.s3.cubbit.eu/A/am11binupload.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--824336a7-097e-5d02-67ce-00004e888f96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/syst3md","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/syst3md']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dc1f2b2-fe64-8f6c-8fce-0000f8451ec4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/main","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/main']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cc2af85-d073-69ea-c6c4-00004f7d9f63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/cli","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/cli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44b0b030-d142-41f2-41bc-0000ffb9bd4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/Error84","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/Error84']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--070d561a-83e4-9af3-1581-00007797e560","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://glbeletronica.com.br/wp-content/admin/Client_20260811_035917.exe","pattern":"[url:value = 'https://glbeletronica.com.br/wp-content/admin/Client_20260811_035917.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96322f72-b80b-be54-0383-000079c890eb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://glbeletronica.com.br/wp-content/admin/bin.exe","pattern":"[url:value = 'https://glbeletronica.com.br/wp-content/admin/bin.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6742af4b-e1f1-2b33-f123-000039f4a772","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/proot","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/proot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db0b967c-fdbd-387f-a86a-000019542055","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/log","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/log']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45cd1ef1-9b4b-6c1f-b481-000071e4ddde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/wd1337","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/wd1337']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--883fb428-9ef8-77aa-a2fa-0000f4e714ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/wd1337","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/wd1337']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2552e219-66d6-016c-1feb-00000eac7cc2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://rcf.co.mz/google.exe","pattern":"[url:value = 'https://rcf.co.mz/google.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5edcb75f-6d1d-90da-d78f-0000b7778afd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://munihuacho.gob.pe/vehiculos/img_065018.png","pattern":"[url:value = 'https://munihuacho.gob.pe/vehiculos/img_065018.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f79e3efa-71de-7565-be76-00001a571661","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/wlSaH","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/wlSaH']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c421e16c-cbe8-d1cb-6505-0000beb7a5dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://munihuacho.gob.pe/vehiculos/MSI_PRO.png","pattern":"[url:value = 'https://munihuacho.gob.pe/vehiculos/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8f26619-8874-0dcc-17fe-000087958288","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://medicosantiagomarrero.com/services/img.png","pattern":"[url:value = 'https://medicosantiagomarrero.com/services/img.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f886112c-90a7-d513-f4f5-00009223ffd7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.109.139.79/hdGFtyu.png","pattern":"[url:value = 'http://192.109.139.79/hdGFtyu.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbe8dd62-61fb-6404-5cba-000025628b23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.109.139.79/flyudfg.png","pattern":"[url:value = 'http://192.109.139.79/flyudfg.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6c7535a-8e91-3769-bf75-000001cbb7ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.9.35.137:54934/i","pattern":"[url:value = 'http://95.9.35.137:54934/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b9efbe3-6f23-5e6e-ad80-0000bf2dade9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/3xmytp.sh","pattern":"[url:value = 'http://31.76.29.161/3xmytp.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f453511-7125-9d0a-b7a9-00004d15fb2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://203.2.151.15:43360/bin.sh","pattern":"[url:value = 'http://203.2.151.15:43360/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec627c6d-97bd-175d-140b-0000944f2bbf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://203.2.151.15:43360/i","pattern":"[url:value = 'http://203.2.151.15:43360/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d7e7d7b-796d-db11-36f0-000081fe99d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://sarafinance.in/img/roya/stego_4vsu6x7ai8.png","pattern":"[url:value = 'https://sarafinance.in/img/roya/stego_4vsu6x7ai8.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dafa7d1-2144-7181-8168-0000df128ec3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.sh4","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f58039e4-1993-478f-77bd-0000b9a133bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.arm5","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83da76a2-5da0-a532-6b1a-000031e92999","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.m68k","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--654f7448-403d-d819-7c01-000027cf7940","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.x86","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c89685e-89ec-4897-dc93-0000ab149c53","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.arm6","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cff64274-60e6-11db-e6bc-0000311fff43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.mips","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48fd4586-d5c0-aa12-8c17-00005fcc1735","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.ppc","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b8e58c8-ef2d-429e-149f-000013a8fb36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.arm7","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82870972-a839-54a2-a220-0000011d54d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.arm4","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a2484bd-be0f-da17-2e6d-00005a1c9109","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.mpsl","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ccd9887-0853-fb12-be9e-00004c41f6f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.189.81:42693/i","pattern":"[url:value = 'http://123.14.189.81:42693/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bb4e995-b551-674e-2c02-00004c1e000e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.stratagemzw.com/MSI_PRO.png","pattern":"[url:value = 'https://www.stratagemzw.com/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d434940-f521-2c09-e53e-00004a822c05","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://stratagemzw.com/img_014220.png","pattern":"[url:value = 'https://stratagemzw.com/img_014220.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--096254c2-94e9-492e-091d-00001b369fad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://raw.githubusercontent.com/mikeweed2/work/refs/heads/main/rmc.exe","pattern":"[url:value = 'https://raw.githubusercontent.com/mikeweed2/work/refs/heads/main/rmc.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff414429-9937-05da-837c-00005624c339","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://dasberlinerhotel.com/wp-content/uploads/update.exe","pattern":"[url:value = 'https://dasberlinerhotel.com/wp-content/uploads/update.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--892285fa-5e6a-a491-dd62-0000dfb19ecb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://stratagemzw.com/img_014740.png","pattern":"[url:value = 'https://stratagemzw.com/img_014740.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e526f20d-af64-f1c3-0727-00000829d0da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.54.103.153/40/JSload.hta","pattern":"[url:value = 'http://209.54.103.153/40/JSload.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a013820-cf73-e572-c45a-0000aca38f79","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.54.103.153/50/weneedbestthingsfromtheheartforbest.js","pattern":"[url:value = 'http://209.54.103.153/50/weneedbestthingsfromtheheartforbest.js']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c500a6f1-bc80-ab3f-5cbd-0000b82d47e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_02013378a7416297.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_02013378a7416297.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b7acf5e-2a34-da3f-c5a2-00006ee615ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://138.204.196.136:51078/bin.sh","pattern":"[url:value = 'http://138.204.196.136:51078/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--909403ff-e8d1-55dc-beb7-000096a1754d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.arm","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93552bb0-4be6-eb8b-624f-00005c59e33f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.mips","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78487ea4-8032-5576-d113-0000e3bc2db0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.x86_64","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--affc214d-1cb3-22c8-794d-0000b4a0f046","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.mips","pattern":"[url:value = 'http://2.26.48.37/eclipse.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7968af85-bdc5-0bcf-4851-0000797ed5f0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.i686","pattern":"[url:value = 'http://2.26.48.37/eclipse.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3d0159b-f4d9-2f79-ca3c-0000b456269c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.m68k","pattern":"[url:value = 'http://2.26.48.37/eclipse.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04645390-eebf-d8d5-5099-0000d22c568c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.powerpc","pattern":"[url:value = 'http://2.26.48.37/eclipse.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87424b4e-1f74-776a-5b25-0000052d5391","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.sh4","pattern":"[url:value = 'http://2.26.48.37/eclipse.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a185891-8756-9967-3ae5-000069a9d809","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.armv5l","pattern":"[url:value = 'http://2.26.48.37/eclipse.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--730369d0-16cd-ae0d-4de6-000054c9f1b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.armv4l","pattern":"[url:value = 'http://2.26.48.37/eclipse.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41350b52-68e3-f691-5a75-00002e09a2d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.armv6l","pattern":"[url:value = 'http://2.26.48.37/eclipse.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b2e11dc-96ef-48fd-8b76-0000ffeaa75e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.i586","pattern":"[url:value = 'http://2.26.48.37/eclipse.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--582e3a13-1624-50d6-f285-000013698b69","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.armv7l","pattern":"[url:value = 'http://2.26.48.37/eclipse.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14e92e84-6770-575c-1dcd-0000c09ba516","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.mipsel","pattern":"[url:value = 'http://2.26.48.37/eclipse.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac4ebb05-d158-6ccb-f801-000064e89c0d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_5ff61cd0b7de191e.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_5ff61cd0b7de191e.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e7d6303-4971-d37a-a30a-00009654ce7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.203.138.135:48639/i","pattern":"[url:value = 'http://115.203.138.135:48639/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f06e754a-e55e-3963-cac1-000071398ca4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_5483b5101365b3ed.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_5483b5101365b3ed.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b27eb7b2-0b9e-f354-1c01-00002e950b26","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-8ce03602555a436b80dbe377ce6f81de.r2.dev/drumwork.png","pattern":"[url:value = 'https://pub-8ce03602555a436b80dbe377ce6f81de.r2.dev/drumwork.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99412f8d-a6bd-a4f3-14bd-00000e5c848f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-7bb797b9d5664a109b755165099495ac.r2.dev/aphelope.hta","pattern":"[url:value = 'https://pub-7bb797b9d5664a109b755165099495ac.r2.dev/aphelope.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--565af734-1000-d067-461b-00000757c724","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-8ce03602555a436b80dbe377ce6f81de.r2.dev/bagcorn.png","pattern":"[url:value = 'https://pub-8ce03602555a436b80dbe377ce6f81de.r2.dev/bagcorn.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98aa1923-7d03-106c-6c38-0000637e5e61","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/NeOky","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/NeOky']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--156d4097-b559-483b-3efb-0000cf50b92e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://suppliers.lovestoblog.com/img_005219.png","pattern":"[url:value = 'https://suppliers.lovestoblog.com/img_005219.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45688246-7633-9bbe-e146-0000cabda73a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://totalfitting.com.au/super%20agent.exe","pattern":"[url:value = 'https://totalfitting.com.au/super%20agent.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dac6eae-e225-6d4a-a10f-0000038e9c43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://midle-eastcompany.com/HypEEAugustBless2026.exe","pattern":"[url:value = 'https://midle-eastcompany.com/HypEEAugustBless2026.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e46c383b-f397-1ba0-d400-00008fd3deb3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://aeplled.cfd/stego/stego_7mpp3kpd10.png","pattern":"[url:value = 'https://aeplled.cfd/stego/stego_7mpp3kpd10.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d14ca21-d003-65a3-e2a1-0000e636829d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://sumiko.vu/praise/agent%20hype.bin","pattern":"[url:value = 'https://sumiko.vu/praise/agent%20hype.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4b04b7d-279f-6f9d-7217-000070b39b0b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.38.210.180:58578/i","pattern":"[url:value = 'http://110.38.210.180:58578/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--704130ae-87a6-b1af-8d64-0000f90d7241","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/files/5917492177/O0KqSEz.exe","pattern":"[url:value = 'http://62.60.226.140/files/5917492177/O0KqSEz.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c66b656c-ca0a-c78f-b7a9-00007751501e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.186.110:34455/bin.sh","pattern":"[url:value = 'http://112.248.186.110:34455/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6d08f45-7d85-cef3-4128-0000b8ef5c73","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.186.110:34455/i","pattern":"[url:value = 'http://112.248.186.110:34455/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--351e9264-b8f8-9fc3-f962-000002d0f39c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.199/LjEZs/x86_64nosl","pattern":"[url:value = 'http://176.65.139.199/LjEZs/x86_64nosl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de1b8b91-636d-f465-6d13-00005ab51fdb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.243/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.243/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--921b9e45-4fc9-0c7a-d0fa-0000e780646f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.243/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.243/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71b2c65b-34b2-8f50-1f77-00002c5026e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.240/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.240/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b511f344-52af-8cb6-1e9b-0000d6c4f28b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.237/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.237/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f911e690-58ec-75d2-086e-00006bf1893f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.237/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.237/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb7cb0d7-01b4-cbef-c971-0000c1c6f50f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.242/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.242/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f77ca503-69d6-29b1-c9ef-00007cf38ebb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.242/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.242/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f5f2d02-a75e-f019-1db0-00002c0c8775","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.244/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.244/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3db2d38f-cfec-aea7-3f63-000091655d52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.240/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.240/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0e9adf7-bc9c-5bf5-30bb-00008682b863","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.239/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.239/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c76ddd6-5e90-4e6c-95c4-0000f08263eb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.236/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.236/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ace9b823-a168-7df2-2f6a-00003bb7c3d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.239/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.239/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98e99ee2-1aaa-5b17-2fa2-00006804bcb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://45.83.31.84/bin/support.client.exe","pattern":"[url:value = 'https://45.83.31.84/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7e58a57-559b-bfd6-fed6-00008c891b6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://45.83.31.84/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://45.83.31.84/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67e93ff5-dba0-b4aa-3a40-0000c6718412","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://124.198.131.91/bin/support.client.exe","pattern":"[url:value = 'https://124.198.131.91/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20f93c16-8e03-d339-3df1-00005b4fa90b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://124.198.131.91/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://124.198.131.91/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3f2755f-65c2-15c5-bea3-0000926d3203","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://209.141.51.224/dns","pattern":"[url:value = 'http://209.141.51.224/dns']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ae50968-905e-1179-4120-0000b31072c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.53.139/linpeas.sh","pattern":"[url:value = 'http://209.141.53.139/linpeas.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d52b9a33-0c85-fc09-5260-0000f5498562","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://38.76.206.4/123","pattern":"[url:value = 'http://38.76.206.4/123']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8653581-e3d0-4e0a-e6e4-00008b6863b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/lterouter","pattern":"[url:value = 'http://160.119.71.134/n2/lterouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--513b11dd-c718-9d16-e6dc-000093f529a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/mpsl","pattern":"[url:value = 'http://160.119.71.134/n2/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4e9d714-d89c-9f7c-167b-0000f8f647e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/mips","pattern":"[url:value = 'http://160.119.71.134/n2/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--977d839a-1145-a688-da6e-00003ae8be16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/g","pattern":"[url:value = 'http://144.31.147.198/g']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dabb9d6-3563-3d0a-9233-0000097163a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/tr","pattern":"[url:value = 'http://144.31.147.198/tr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64c4f2d2-25dc-e93c-c741-0000c0f82102","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/u","pattern":"[url:value = 'http://144.31.147.198/u']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68a571e2-932d-4a06-64ac-0000ce885ed8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/mp","pattern":"[url:value = 'http://144.31.147.198/mp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77a86a84-b675-f920-2cdc-000055555e72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/m","pattern":"[url:value = 'http://144.31.147.198/m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b43c8d2-8262-e950-ec8b-0000968de997","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/gs","pattern":"[url:value = 'http://144.31.147.198/gs']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3a5d8fa-e0b2-ddff-1def-0000a378ab2b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/tp","pattern":"[url:value = 'http://144.31.147.198/tp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9ccff27-0192-0a06-78a2-0000c88266cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/j","pattern":"[url:value = 'http://144.31.147.198/j']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70c5ae9d-8e66-2091-c124-0000da37c925","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/i","pattern":"[url:value = 'http://144.31.147.198/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8da757e7-bb73-ea9c-3f3a-0000e5937ede","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/s","pattern":"[url:value = 'http://144.31.147.198/s']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14ae065d-4122-9483-f24d-0000f726d130","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/p","pattern":"[url:value = 'http://144.31.147.198/p']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17211ce7-f8e1-b0b5-b74a-0000f2c5ce9f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://144.31.167.1/bin/support.client.exe","pattern":"[url:value = 'https://144.31.167.1/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e332b73c-7869-16f7-bd7a-0000ba543046","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/ppc","pattern":"[url:value = 'http://160.119.71.134/n2/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eab92b35-6c9c-bb54-acfb-0000121b947e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/sparc","pattern":"[url:value = 'http://160.119.71.134/n2/sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8c5e3c2-3101-53d8-2ce5-0000f8009138","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/m68k","pattern":"[url:value = 'http://160.119.71.134/n2/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6789c032-25cd-7a11-5e43-00008c0798fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/armv7l","pattern":"[url:value = 'http://160.119.71.134/n2/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e92f173-c789-d076-5a95-0000b167b14d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/armv6l","pattern":"[url:value = 'http://160.119.71.134/n2/armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55bfa2b0-b9d4-3e83-c479-0000f6c7cb9d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/armv5l","pattern":"[url:value = 'http://160.119.71.134/n2/armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ca493f1-dda7-ea72-3932-0000cba7e22d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/armv4l","pattern":"[url:value = 'http://160.119.71.134/n2/armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce8086f2-52b6-a49d-91ed-0000c2575e33","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/x86","pattern":"[url:value = 'http://160.119.71.134/n2/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9660556b-778d-299e-4fef-00003a8aa9b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/sh4","pattern":"[url:value = 'http://160.119.71.134/n2/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c87c8e0-84c0-c94f-aa8a-00002d6bded7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/aarch64","pattern":"[url:value = 'http://160.119.71.134/n2/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0628cec2-bae8-39c0-7474-0000069155bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/x86_64","pattern":"[url:value = 'http://160.119.71.134/n2/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--336f110f-abe9-040b-36fe-000071fe5d79","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.138.178:42032/i","pattern":"[url:value = 'http://112.198.138.178:42032/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9214e701-ca96-9152-d352-0000fe519e5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/tbk","pattern":"[url:value = 'http://160.119.71.134/n2/tbk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76ad9f5f-a781-bf9c-817c-0000cd2865d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.197.131:44348/bin.sh","pattern":"[url:value = 'http://196.189.197.131:44348/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a197733b-e945-93c5-2813-0000b63163ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.197.131:44348/i","pattern":"[url:value = 'http://196.189.197.131:44348/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9701fe3e-cecc-ede2-77cb-000027bb7106","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172-104-49-49.ip.linodeusercontent.com/bot.mips","pattern":"[url:value = 'http://172-104-49-49.ip.linodeusercontent.com/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a11da1c4-5d07-020c-95eb-0000b6ca9ae2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.mips","pattern":"[url:value = 'http://172.104.49.49/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d54016f-4a5e-0d43-7045-0000c2e06d12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://154.90.70.23/mpsl","pattern":"[url:value = 'http://154.90.70.23/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd4af046-beab-a4c3-3d41-000002d4fd52","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.sh4","pattern":"[url:value = 'http://172.104.49.49/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8181211-0550-a5b1-2691-0000820a64a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.ppc","pattern":"[url:value = 'http://172.104.49.49/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--007294d3-8846-7d9e-eca5-0000d09f91c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.arm","pattern":"[url:value = 'http://172.104.49.49/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52bb15e0-6b14-8386-0834-00003692194c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.aarch64","pattern":"[url:value = 'http://172.104.49.49/bot.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7565bb78-d64b-dae1-bab8-0000947d9e97","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.arm7","pattern":"[url:value = 'http://172.104.49.49/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13108047-8542-fa35-b6d9-0000a79756d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.mipsel","pattern":"[url:value = 'http://172.104.49.49/bot.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e769a20-1b50-2d21-550b-0000fef3b5e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.x86_64","pattern":"[url:value = 'http://172.104.49.49/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc513908-77ea-af89-98d2-0000e88df872","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://tarkioweb.com/crypted.exe","pattern":"[url:value = 'https://tarkioweb.com/crypted.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14fd00ac-47ab-3968-802b-0000e7186f1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.207.229.26:38938/i","pattern":"[url:value = 'http://27.207.229.26:38938/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00f5b246-5c34-6bb2-5502-00009b457e75","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.69.34:57222/i","pattern":"[url:value = 'http://182.127.69.34:57222/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0efd658-95e6-1d51-92f8-0000710ea716","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.73.172.141:48914/i","pattern":"[url:value = 'http://39.73.172.141:48914/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96ac7794-3c0d-d752-bf7d-0000b17255e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.130.28:46269/bin.sh","pattern":"[url:value = 'http://196.189.130.28:46269/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88005e5e-68a9-1cc9-8b5e-0000b66c3646","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.223.141.118:49088/bin.sh","pattern":"[url:value = 'http://117.223.141.118:49088/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90ba8022-c9ff-86ea-dc15-0000df881569","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.mips","pattern":"[url:value = 'http://150.241.65.212:889/pito.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c8866d3-cfcb-c2a1-9d08-0000ab7d09a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.x64","pattern":"[url:value = 'http://150.241.65.212:889/pito.x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6192b93-35ba-2cd4-3bfa-000019381678","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/dp.sh","pattern":"[url:value = 'http://150.241.65.212:889/dp.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddcbcb24-c673-c3d9-9b03-0000ef8abef2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.arm4","pattern":"[url:value = 'http://150.241.65.212:889/pito.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73e1039c-e214-418d-56ef-0000fc5f8564","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.ppc440","pattern":"[url:value = 'http://150.241.65.212:889/pito.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3466c83-6359-9956-bcd9-000041f220aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.i686","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49fed69d-e446-6e3f-188b-00008cdad3c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.m68k","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40deb026-4431-2f92-c82c-00004d182ed7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.mipsel","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d69ff077-8a7c-d42f-e9bf-0000d1c454c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.ppc","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--118c5c65-4f12-cce7-e104-0000486a9127","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.sparc","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3cd1220-8ce0-2837-6501-0000511acd33","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.sh4","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6adc861-c445-9f13-9042-00001627660c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.arm6","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48a3a94d-b486-3b7e-d0a5-0000bc2eae87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.arm4","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6462466e-d7c1-7027-7454-0000b3a04b17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.ppc440","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0c2b8ed-51a6-2d46-db67-00000c3a81a1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.i486","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fa499db-b3b3-fe67-d0b8-00000492c9e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.arm5","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1aaf8f7-3a66-c024-ca91-0000ae9b0169","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.arm7","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ba08d1b-391e-c536-3fb4-0000bcfe4c5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.x64","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--575df5d4-3dba-36eb-cbdb-000002e7e0a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.mipsel","pattern":"[url:value = 'http://150.241.65.212:889/pito.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc96b4f4-72e8-0333-b7b9-0000df7ec3b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.m68k","pattern":"[url:value = 'http://150.241.65.212:889/pito.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33c5aa08-99d7-ed48-7f91-000045837679","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.arm6","pattern":"[url:value = 'http://150.241.65.212:889/pito.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2577edfb-86d0-6508-8f4a-00006856b084","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.sparc","pattern":"[url:value = 'http://150.241.65.212:889/pito.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01b71bbf-9f19-7ff1-7512-0000c6471137","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.ppc","pattern":"[url:value = 'http://150.241.65.212:889/pito.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c052a71-8e06-eac2-f282-0000be447f42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.x86","pattern":"[url:value = 'http://150.241.65.212:889/pito.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45aada84-4da4-f883-c56e-00005f9e91d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.i486","pattern":"[url:value = 'http://150.241.65.212:889/pito.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aaccfbb2-85b1-6f47-9cd4-00005736d997","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.arm5","pattern":"[url:value = 'http://150.241.65.212:889/pito.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--462e0eea-ccff-bf67-66ad-0000125630df","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.i686","pattern":"[url:value = 'http://150.241.65.212:889/pito.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb2dc1b9-0415-2c38-064c-0000a9c73ab0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.x86","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74e5f9e8-28f0-e2b2-a665-0000469988c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.sh4","pattern":"[url:value = 'http://150.241.65.212:889/pito.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44c29a9e-24d4-3ae9-4f52-0000fd3f111c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.arm7","pattern":"[url:value = 'http://150.241.65.212:889/pito.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05d2e24b-2d86-beef-3191-00008c2c051c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.mips","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c8c5a18-499b-fd42-de11-00004219cd9f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.228.137:43905/bin.sh","pattern":"[url:value = 'http://125.43.228.137:43905/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a50558c-37c6-b2f9-4470-0000b0fe5fa5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.223.141.118:49088/i","pattern":"[url:value = 'http://117.223.141.118:49088/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa4172e9-2226-6835-8d39-00004e97c459","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.225.231.237:58779/bin.sh","pattern":"[url:value = 'http://42.225.231.237:58779/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c62cdaeb-e039-0397-7c5c-000018ce3b5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.228.137:43905/i","pattern":"[url:value = 'http://125.43.228.137:43905/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8fb28ea-2db6-0eac-11a5-00002731954e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.172.186.158:49566/bin.sh","pattern":"[url:value = 'http://103.172.186.158:49566/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27f62e1c-eb99-7a1c-067a-0000be934198","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.51.111.87:51413/bin.sh","pattern":"[url:value = 'http://115.51.111.87:51413/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6482efe-ba49-de76-1d5b-0000382cdb0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.140.152:59339/bin.sh","pattern":"[url:value = 'http://59.96.140.152:59339/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e925d819-5d35-9fad-9a55-0000e56446e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.113.190:35309/i","pattern":"[url:value = 'http://182.116.113.190:35309/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b5d9fdf-8263-5b7f-f4d5-000091a08ca4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.0.112.226:51471/i","pattern":"[url:value = 'http://218.0.112.226:51471/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a3426db-e91b-05b8-3664-000097c0e8b4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.76.206.254:50342/i","pattern":"[url:value = 'http://116.76.206.254:50342/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b347fbbc-50a1-db39-7b9f-000027c2ae2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.172.186.158:49566/i","pattern":"[url:value = 'http://103.172.186.158:49566/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5897b608-36c5-20c1-bcfb-000026911b97","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.165.6.177:41089/bin.sh","pattern":"[url:value = 'http://175.165.6.177:41089/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1afd238e-74ea-fb17-8c7d-000062788afe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.51.111.87:51413/i","pattern":"[url:value = 'http://115.51.111.87:51413/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d61598d7-a030-2af3-8fa8-0000a8f58234","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.165.138:33116/bin.sh","pattern":"[url:value = 'http://123.12.165.138:33116/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ec85a1e-fc7b-a2a3-636d-000037253496","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.248.104.54:56510/bin.sh","pattern":"[url:value = 'http://112.248.104.54:56510/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--309e1a46-620e-18ea-4237-000027fbf074","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://202.1.26.69:42948/i","pattern":"[url:value = 'http://202.1.26.69:42948/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--560da8b7-0d71-9561-58ab-00002c08e731","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.165.6.177:41089/i","pattern":"[url:value = 'http://175.165.6.177:41089/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe3a0b24-a65b-4bc9-4d1d-0000eecaab15","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.165.138:33116/i","pattern":"[url:value = 'http://123.12.165.138:33116/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57024aa2-32a8-d787-329f-0000ca120a54","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.232.182:58614/bin.sh","pattern":"[url:value = 'http://182.119.232.182:58614/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9109e95-39ec-55b3-7a21-0000fddb88ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.79.136.25:46193/i","pattern":"[url:value = 'http://39.79.136.25:46193/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86505e2a-47bf-c013-bf55-00008effa730","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.54.40.8:41660/i","pattern":"[url:value = 'http://61.54.40.8:41660/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ec1cd2f-0db5-5489-c7b8-000055501fd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.0.112.226:51471/bin.sh","pattern":"[url:value = 'http://218.0.112.226:51471/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9bc924c-2ff4-8ce3-a91a-00000c56269c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.113.190:35309/bin.sh","pattern":"[url:value = 'http://182.116.113.190:35309/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f682c7f-9771-5780-d4f6-0000d183e838","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.186.231.112:53078/bin.sh","pattern":"[url:value = 'http://110.186.231.112:53078/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee4308f7-6531-153b-dfbc-000063f1ba37","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.199.15:38549/i","pattern":"[url:value = 'http://182.119.199.15:38549/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98db0edd-33e6-50aa-3930-0000fea5c587","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.186.231.112:53078/i","pattern":"[url:value = 'http://110.186.231.112:53078/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d03c045-21ad-4437-3937-0000d0d48c3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.51.101.70:58354/i","pattern":"[url:value = 'http://115.51.101.70:58354/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b48b3562-8878-0ae3-07b2-0000677ec24a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.191.195:47591/bin.sh","pattern":"[url:value = 'http://123.5.191.195:47591/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b86a09f8-8238-c382-d432-000033045471","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.174.107.238:46076/bin.sh","pattern":"[url:value = 'http://175.174.107.238:46076/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--830d9573-3eb8-a73e-a2ea-0000d04691c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.167.215:38779/bin.sh","pattern":"[url:value = 'http://105.184.167.215:38779/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f2158ab-2905-2a45-ec36-00001f5030a2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.118.241.30:39103/i","pattern":"[url:value = 'http://182.118.241.30:39103/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c66069ec-11eb-0ecd-3773-0000ad03dd1a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.188.75.58:48074/bin.sh","pattern":"[url:value = 'http://196.188.75.58:48074/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4a1de20-dbd3-30a4-37cf-000072517805","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.167.215:38779/i","pattern":"[url:value = 'http://105.184.167.215:38779/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01c58c85-2c60-4bd1-6465-00006fb07dbc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.188.75.58:48074/i","pattern":"[url:value = 'http://196.188.75.58:48074/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a3e42b7-e9b2-cdf2-7467-000037499d7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.191.195:47591/i","pattern":"[url:value = 'http://123.5.191.195:47591/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa17f1d4-4e39-fd9f-68a8-0000f0828d83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.64.213:36972/i","pattern":"[url:value = 'http://123.11.64.213:36972/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcaeeae2-ba97-e75a-c37c-0000cbefd455","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.156.239:54755/i","pattern":"[url:value = 'http://175.148.156.239:54755/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cf6d24c-8bd6-e181-0665-00006a26c1e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.1.247.58:51510/bin.sh","pattern":"[url:value = 'http://221.1.247.58:51510/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4aabfb2b-3b1b-d371-c710-00007622aef3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.154.98.198:48439/bin.sh","pattern":"[url:value = 'http://105.154.98.198:48439/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--473f7804-46eb-3517-893b-0000a2ff33f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.231.100.15:46916/bin.sh","pattern":"[url:value = 'http://113.231.100.15:46916/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c7eb96d-c5b9-a3ea-128a-000036c3546b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.154.98.198:48439/i","pattern":"[url:value = 'http://105.154.98.198:48439/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a2b1766-d609-309b-c8a6-000011138f60","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/armv5l","pattern":"[url:value = 'http://31.76.20.19/armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bddde71-7f4a-80d8-95d0-0000469c010a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/ppc64","pattern":"[url:value = 'http://31.76.20.19/ppc64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4da6173-4660-1c3a-025e-0000b821f27f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/mipsel","pattern":"[url:value = 'http://31.76.20.19/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d092696f-d5b7-06a9-710f-00001dc3ebe5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/x86","pattern":"[url:value = 'http://31.76.20.19/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcdda4ca-0fee-7c7d-3498-00005a478100","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/i686","pattern":"[url:value = 'http://31.76.20.19/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b81d75e4-b612-408b-f12a-00006bd3dc00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/armv7l","pattern":"[url:value = 'http://31.76.20.19/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a492a02-b3d5-ef37-aee4-00009799a4b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/mips","pattern":"[url:value = 'http://31.76.20.19/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a10644a5-92c4-374b-ec2b-000056b3f5b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/armv6l","pattern":"[url:value = 'http://31.76.20.19/armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afb7692d-639e-b50b-b5d7-000025d96673","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.32.25:51859/bin.sh","pattern":"[url:value = 'http://123.13.32.25:51859/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bba5f9c-de92-a45d-7cb5-000016e81f18","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.32.25:51859/i","pattern":"[url:value = 'http://123.13.32.25:51859/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60465e3a-81ea-a58f-fe7b-0000660db1f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.231.100.15:46916/i","pattern":"[url:value = 'http://113.231.100.15:46916/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06a71cea-dca7-01d5-9259-0000fec67bc8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://2.26.81.123/bins/xnxnxnxnxnxnxnxnx86_64xnxn","pattern":"[url:value = 'http://2.26.81.123/bins/xnxnxnxnxnxnxnxnx86_64xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e9df1c0-3995-2f28-2b8f-0000e6c0ecf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://2.26.81.123/run.sh","pattern":"[url:value = 'http://2.26.81.123/run.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--792044b7-2cf7-a51f-6c96-00009b1c078b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/arm","pattern":"[url:value = 'http://2.26.81.46/bins/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b30c7c2c-5244-1a3a-95ae-00004f1d8048","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/spc","pattern":"[url:value = 'http://2.26.81.46/bins/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d2fd89d-60cb-9d5d-527e-0000e38d1c7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/i686","pattern":"[url:value = 'http://2.26.81.46/bins/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98910620-e32d-1e96-53c9-00001d690782","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/eclipse.m68k","pattern":"[url:value = 'http://2.26.81.46/eclipse.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cf8f3bb-93e3-c05d-31e3-0000b18a9c93","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/x86","pattern":"[url:value = 'http://2.26.81.46/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b14ac275-c35e-1551-bf04-0000c989f2e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/ppc","pattern":"[url:value = 'http://2.26.81.46/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1cd2dc5-1b00-4cc2-529b-0000a6edf536","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/arm5","pattern":"[url:value = 'http://2.26.81.46/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0229bc3e-a1fd-8ecf-88d6-0000d041f4ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/eclipse.i686","pattern":"[url:value = 'http://2.26.81.46/eclipse.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4182022-4324-fa54-ce77-000049576b10","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/sh4","pattern":"[url:value = 'http://2.26.81.46/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f50c62-594e-246f-a2f8-0000de47130a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/x86_64","pattern":"[url:value = 'http://2.26.81.46/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7976283-5bd7-2d71-ff6b-00002ea5ef12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/m68k","pattern":"[url:value = 'http://2.26.81.46/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5fc7d13-0ecc-b520-ec7c-0000c48ce1de","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/dbg","pattern":"[url:value = 'http://2.26.81.46/bins/dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4bd32f6-fc34-e62e-7512-00001d9fd158","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/eclipse.mips","pattern":"[url:value = 'http://2.26.81.46/eclipse.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e69909c-e62c-bad4-542a-000045505782","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/mpsl","pattern":"[url:value = 'http://2.26.81.46/bins/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--777a5e84-dc02-39e7-a530-000086a21e7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/eclipse.sh4","pattern":"[url:value = 'http://2.26.81.46/eclipse.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebbb5655-25df-5a2d-46cf-00002e5339c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/mips","pattern":"[url:value = 'http://2.26.81.46/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fc34ce9-7d4b-f2d8-0b05-00000ce43dbd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/arm7","pattern":"[url:value = 'http://2.26.81.46/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba00790f-b2f5-6c1d-045c-000001d7c096","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/eclipse.x86_64","pattern":"[url:value = 'http://2.26.81.46/eclipse.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5ffa243-b195-bcce-6f7c-000037994724","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://144.31.30.228/linux_amd64","pattern":"[url:value = 'http://144.31.30.228/linux_amd64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0bd6afb-67b2-27d9-53b4-000067259523","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://144.31.30.228/linux_arm5","pattern":"[url:value = 'http://144.31.30.228/linux_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05c87f6a-bef5-a785-a03a-00008c2e24e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://144.31.30.228/linux_mips64","pattern":"[url:value = 'http://144.31.30.228/linux_mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9acb116b-cc2e-ce35-60c3-0000ef9b59dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://144.31.30.228/linux_mips","pattern":"[url:value = 'http://144.31.30.228/linux_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f254de05-b26e-cc3c-3c71-00008100facb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://144.31.30.228/linux_arm64","pattern":"[url:value = 'http://144.31.30.228/linux_arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4eb30bd7-06dd-712f-fa4b-0000cd2c5da8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://144.31.30.228/linux_arm7","pattern":"[url:value = 'http://144.31.30.228/linux_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e65b7ad-eb7a-9306-b36d-0000b38a266b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.241.248/svchost.exe","pattern":"[url:value = 'http://217.60.241.248/svchost.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fcfcf50-a812-117e-8da5-0000df737f81","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.247/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.247/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7b7b5df-68d9-b99b-db64-0000be144bb6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.247/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.247/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81610c63-5c43-67ed-449a-000028e72e94","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.70.215:55426/i","pattern":"[url:value = 'http://182.119.70.215:55426/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bb981b8-1b0e-a601-fcb1-0000af1e480f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://95.155.151.113/tbk_stage1.sh","pattern":"[url:value = 'http://95.155.151.113/tbk_stage1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1360e400-7b5f-a768-cafd-000083d6120d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.217.97.11/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://217.217.97.11/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84aa7c8b-fee9-9256-f6b5-0000ac9fcd47","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.217.97.11/bin/support.client.exe","pattern":"[url:value = 'https://217.217.97.11/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7a63733-827b-920d-76d3-00007de9b849","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://95.155.151.113/t","pattern":"[url:value = 'http://95.155.151.113/t']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac5e1e31-a1a8-d30c-c0d5-0000894d8989","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.252.193:40074/bin.sh","pattern":"[url:value = 'http://42.239.252.193:40074/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--123fbb9b-a410-4b7f-15e4-0000b46748e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_529348465823b047.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_529348465823b047.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cd0235c-7e2c-2421-b349-0000a9aa3783","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_583f8856851a870c.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_583f8856851a870c.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6abfeb4f-0eca-6cc7-4101-000069e40b03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.36.94/william/mort.php","pattern":"[url:value = 'http://217.60.36.94/william/mort.php']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34a0e0e4-676a-7e45-04ed-0000d2356de2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.36.94/test/t.php","pattern":"[url:value = 'http://217.60.36.94/test/t.php']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b8638b0-b0d5-90ce-898e-0000226c21db","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.36.94/test/p.txt","pattern":"[url:value = 'http://217.60.36.94/test/p.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9fd6dc2-b68a-676a-3b96-000075029c22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.36.94/william/wi.txt","pattern":"[url:value = 'http://217.60.36.94/william/wi.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a9773c1-e956-868d-9bdc-00000e629501","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_7cba58e6cdbbfa7e.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_7cba58e6cdbbfa7e.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c39ee887-4a16-07cf-0bcb-0000911c8fcf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://217.60.36.94/test/test.bef_fri","pattern":"[url:value = 'http://217.60.36.94/test/test.bef_fri']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae9023d3-f0a7-ac2d-ec98-0000351f2a4c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_2f5216405eb2fec9.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_2f5216405eb2fec9.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eb63fd7-e59a-fce4-8e92-0000066c5a00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/gg11","pattern":"[url:value = 'http://150.241.65.212:889/gg11']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e10649e1-0566-087c-b54d-0000948eaea1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.70.68.244:54909/Mozi.m","pattern":"[url:value = 'http://36.70.68.244:54909/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9810004c-7168-cce6-0118-0000904121f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://www.dropbox.com/scl/fi/otfakqkze127a701il1zh/Vrmod_Setup.exe?rlkey=deryztzard7w3n2btuqo7ivvd&st=48dlc6qm&dl=1","pattern":"[url:value = 'https://www.dropbox.com/scl/fi/otfakqkze127a701il1zh/Vrmod_Setup.exe?rlkey=deryztzard7w3n2btuqo7ivvd&st=48dlc6qm&dl=1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ced1c5b8-9707-4292-46f9-000078622b81","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://www.dropbox.com/scl/fi/7hp56yj650o4slrllg4xj/ChilloutVRMod.exe?rlkey=s69vdpczdpalbo26alwo0u13o&st=f5mgwsxk&dl=1","pattern":"[url:value = 'https://www.dropbox.com/scl/fi/7hp56yj650o4slrllg4xj/ChilloutVRMod.exe?rlkey=s69vdpczdpalbo26alwo0u13o&st=f5mgwsxk&dl=1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ac2211a-b8d8-de5e-798b-00001c32d54d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.228.104.137:42450/bin.sh","pattern":"[url:value = 'http://42.228.104.137:42450/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f1cac66-25d3-950a-3334-0000ae9f5de9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.228.104.137:42450/i","pattern":"[url:value = 'http://42.228.104.137:42450/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2dee7ce-91c7-2ba8-9b02-00001f1364fe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://smmnet.store/Setup.rar","pattern":"[url:value = 'https://smmnet.store/Setup.rar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cf5aa84-dcfd-9fc1-7e63-00008b75a44e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.arm","pattern":"[url:value = 'http://185.93.89.72/mirai.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33f437fe-9a3e-de35-f34c-000061fb8d76","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://seasquadshipping.com/old/img_155944.png","pattern":"[url:value = 'https://seasquadshipping.com/old/img_155944.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6a7f94b-1371-ea40-8d8d-000005754be6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://seasquadshipping.com/old/MSI_PRO.png","pattern":"[url:value = 'https://seasquadshipping.com/old/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--545ee2ad-74ee-2bf0-52ba-0000c54d6654","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.mips","pattern":"[url:value = 'http://185.93.89.72/mirai.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1872d67b-735e-e7bd-9974-0000c5bbb08e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.m68k","pattern":"[url:value = 'http://185.93.89.72/mirai.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1cdce11-aed7-e8c5-604d-0000593ec8d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.sh4","pattern":"[url:value = 'http://185.93.89.72/mirai.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--808cd23c-1867-2dd3-7c5b-00008e07314c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.i586","pattern":"[url:value = 'http://185.93.89.72/mirai.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e28993d-c234-3d9d-04e2-00004df3aaaa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.arm5","pattern":"[url:value = 'http://185.93.89.72/mirai.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8026f811-41d3-382c-83bf-0000e7fa6221","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.arm7","pattern":"[url:value = 'http://185.93.89.72/mirai.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86d9921f-c339-e581-4555-00005f74238d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.spc","pattern":"[url:value = 'http://185.93.89.72/mirai.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--659cafa7-a195-7d34-e20e-0000f8677167","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.x86_64","pattern":"[url:value = 'http://185.93.89.72/mirai.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f4801c0-abf1-0bf8-3a14-000004c52b82","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://nodemetrics3379.com/update/exe","pattern":"[url:value = 'http://nodemetrics3379.com/update/exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--849f2c46-11e1-aed9-a428-0000d9e05123","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.ppc","pattern":"[url:value = 'http://185.93.89.72/mirai.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d55ac54-77c4-87f4-a66e-000086709521","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.252.193:40074/i","pattern":"[url:value = 'http://42.239.252.193:40074/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--496fe891-020a-cf52-b86e-0000430d920d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1d49dd","pattern":"[url:value = 'http://5.182.210.174/1d49dd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95320d1b-814d-1c11-eb64-0000997c2667","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/dcdd69","pattern":"[url:value = 'http://5.182.210.174/dcdd69']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9985b25-62b6-c2e8-009b-00006d6b5e85","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/61f089","pattern":"[url:value = 'http://5.182.210.174/61f089']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--459f964b-85fb-0d58-2984-0000cf128483","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c3106e","pattern":"[url:value = 'http://5.182.210.174/c3106e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ba3d8e2-c457-d312-1456-0000582efcbe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1b9ac2","pattern":"[url:value = 'http://5.182.210.174/1b9ac2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30220d74-ccc6-980e-0576-0000c740babb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e1bf38","pattern":"[url:value = 'http://5.182.210.174/e1bf38']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4a5ed65-7f9e-77ec-ac99-0000f7069647","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/03ab36","pattern":"[url:value = 'http://5.182.210.174/03ab36']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--263f5693-e287-3cea-9c9c-000051a494ce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/98953a","pattern":"[url:value = 'http://5.182.210.174/98953a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c02d36d-a120-dccc-afc8-0000f062eab1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8cf703","pattern":"[url:value = 'http://5.182.210.174/8cf703']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1119c68f-8458-52b3-fa86-0000e7d4c10a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c8bc3c","pattern":"[url:value = 'http://5.182.210.174/c8bc3c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c41967b2-aba6-aa48-6090-00007c7b3ab4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/61d4b3","pattern":"[url:value = 'http://5.182.210.174/61d4b3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3828279f-00ae-b42b-ed7b-0000ed49a0c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/cd5c35","pattern":"[url:value = 'http://5.182.210.174/cd5c35']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2779d8ed-1888-3598-b1bd-0000357480f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/537b66","pattern":"[url:value = 'http://5.182.210.174/537b66']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9b160a6-71d1-ee0f-3a35-0000f0188c38","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/3abc4d","pattern":"[url:value = 'http://5.182.210.174/3abc4d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b507f5f7-a259-edb9-3c64-0000b352a015","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/3cf53c","pattern":"[url:value = 'http://5.182.210.174/3cf53c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65223c09-7bd8-0729-99b1-00005d34465f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://45.90.163.37/powerpc","pattern":"[url:value = 'http://45.90.163.37/powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ccb8860-7179-c5e3-bedb-0000434d87b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/51fc22","pattern":"[url:value = 'http://5.182.210.174/51fc22']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c6faed4-82ec-608e-994b-0000937f35d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ca6953","pattern":"[url:value = 'http://5.182.210.174/ca6953']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aee403b5-2d9c-b94b-841b-0000bba90c59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d3a258","pattern":"[url:value = 'http://5.182.210.174/d3a258']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d098b5ac-f17d-e67f-0a0c-00004372a0f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6a2daa","pattern":"[url:value = 'http://5.182.210.174/6a2daa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--368e0871-35dd-14df-90bc-0000639c63d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/45cbd5","pattern":"[url:value = 'http://5.182.210.174/45cbd5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37ed7a12-5878-bf66-37ed-0000e0bf3d3e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e2ee47","pattern":"[url:value = 'http://5.182.210.174/e2ee47']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dec80b6-5430-1024-ba45-0000a79af159","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c5d620","pattern":"[url:value = 'http://5.182.210.174/c5d620']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea90e586-f21c-ce61-ed76-0000c2c8b69b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/171868","pattern":"[url:value = 'http://5.182.210.174/171868']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9512f7ef-87e4-63ad-722c-0000fe8cd494","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/aecb15","pattern":"[url:value = 'http://5.182.210.174/aecb15']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--126be9a5-1e61-73bc-108b-00007e192a42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ff1781","pattern":"[url:value = 'http://5.182.210.174/ff1781']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f997ea4e-b3ec-3527-c000-00004488f81c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/3a2ee0","pattern":"[url:value = 'http://5.182.210.174/3a2ee0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ac6009e-853f-b5de-df09-000071fcb7bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/174cb4","pattern":"[url:value = 'http://5.182.210.174/174cb4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--931039db-e8eb-e47a-f865-000066990232","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/28d4d8","pattern":"[url:value = 'http://5.182.210.174/28d4d8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbd656a1-daf4-7f03-c0ef-0000af9dff71","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/748306","pattern":"[url:value = 'http://5.182.210.174/748306']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43b75bf3-41dc-dd25-6e00-00004fbe2ad4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/00d054","pattern":"[url:value = 'http://5.182.210.174/00d054']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d293b17-b6eb-0b6f-6911-0000931f8752","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/fff372","pattern":"[url:value = 'http://5.182.210.174/fff372']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--678eb139-f102-5a39-08a0-00002812aa08","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e44028","pattern":"[url:value = 'http://5.182.210.174/e44028']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05ee6ff7-10cf-a347-3932-0000e12a98e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/035755","pattern":"[url:value = 'http://5.182.210.174/035755']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c461fc60-91bc-f2ae-722b-00003e1d7135","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/44066b","pattern":"[url:value = 'http://5.182.210.174/44066b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ebcfe3d-d4e7-c46b-06b9-0000902d0097","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6d0d44","pattern":"[url:value = 'http://5.182.210.174/6d0d44']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80c43d73-c054-c154-76cd-00005420dd30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7a276a","pattern":"[url:value = 'http://5.182.210.174/7a276a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--108b85cf-19fa-3195-fc6d-0000521ba265","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://204.77.9.56/img/img_081951.png","pattern":"[url:value = 'http://204.77.9.56/img/img_081951.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7d11bdc-ad59-c6e3-f8b0-00002807a095","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://204.77.9.56/30/wegivingbestsolutionforbestthings.hta","pattern":"[url:value = 'http://204.77.9.56/30/wegivingbestsolutionforbestthings.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d9e5488-0b73-38bb-a2e8-0000d23029f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://res.cloudinary.com/oj0sd4fl/image/upload/v1786666071/img_200726.jpg","pattern":"[url:value = 'https://res.cloudinary.com/oj0sd4fl/image/upload/v1786666071/img_200726.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--959140a4-bd39-4a55-ec83-00005d765c50","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/90cb09","pattern":"[url:value = 'http://5.182.210.174/90cb09']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78581513-f52f-2044-9921-0000b813672d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/828087","pattern":"[url:value = 'http://5.182.210.174/828087']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f782d83-8b49-01ad-f77c-000069f143b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8bf1cf","pattern":"[url:value = 'http://5.182.210.174/8bf1cf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b3f64c3-eddc-bfbb-bb80-0000d068ee12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/70d8b3","pattern":"[url:value = 'http://5.182.210.174/70d8b3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b743b674-9566-c7e1-e314-0000fac49c81","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/657b82","pattern":"[url:value = 'http://5.182.210.174/657b82']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94f722fa-60b1-5bb7-df4d-0000c84e92a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/60f898","pattern":"[url:value = 'http://5.182.210.174/60f898']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10d2dc1d-e590-f403-5115-0000a5d84c76","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c99e43","pattern":"[url:value = 'http://5.182.210.174/c99e43']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a2af8f1-e8bc-5e71-2828-000047aefea0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/671030","pattern":"[url:value = 'http://5.182.210.174/671030']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21b60c38-e2c1-4dbc-57c6-000050b9a812","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/eb77a9","pattern":"[url:value = 'http://5.182.210.174/eb77a9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a26a6c7-92aa-b018-bc39-00004ac65b83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8413a4","pattern":"[url:value = 'http://5.182.210.174/8413a4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ad08db5-d915-1047-fae0-00003f1d4d8d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/320b53","pattern":"[url:value = 'http://5.182.210.174/320b53']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09036550-1b19-13c7-7246-00001949a54f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1903e1","pattern":"[url:value = 'http://5.182.210.174/1903e1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36abd886-6ac5-4a82-aaa4-0000192b17dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.160.130.168:43943/bin.sh","pattern":"[url:value = 'http://103.160.130.168:43943/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abeaeee9-145c-0b42-ee1b-0000d2677b2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.115.36.34:51030/i","pattern":"[url:value = 'http://119.115.36.34:51030/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d16d3b6f-2b30-a414-ed9e-0000b84c3bbf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.194.25.221:39724/bin.sh","pattern":"[url:value = 'http://45.194.25.221:39724/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a425480-1e92-0ef5-7ac8-00005346e648","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.194.25.221:39724/i","pattern":"[url:value = 'http://45.194.25.221:39724/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f63965d-9a92-0199-24e2-000063b2e54c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.120.105:42593/bin.sh","pattern":"[url:value = 'http://182.116.120.105:42593/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b971ce43-8d1e-05ec-2abb-0000f4d1cde4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.120.105:42593/i","pattern":"[url:value = 'http://182.116.120.105:42593/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f846f6e0-032f-de80-25dc-000080cd3768","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.155.69:33600/i","pattern":"[url:value = 'http://182.121.155.69:33600/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1eb1799a-6c4e-a173-31bf-000046693933","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.11.56:58484/bin.sh","pattern":"[url:value = 'http://219.155.11.56:58484/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e18c2464-77a7-54be-cdb8-0000ae4e081e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.mpsl","pattern":"[url:value = 'http://185.93.89.72/mirai.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--401e13cd-3c1a-f016-1eda-0000f6e13c0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://144.48.123.149:37810/bin.sh","pattern":"[url:value = 'http://144.48.123.149:37810/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97e9da2e-6f5a-b766-5a5f-000064a4599a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://209.54.103.153/50/givingbesthingsforbetterforme.hta","pattern":"[url:value = 'http://209.54.103.153/50/givingbesthingsforbetterforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--316efc5d-df33-e0e5-9ca6-000082111a92","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.11.56:58484/i","pattern":"[url:value = 'http://219.155.11.56:58484/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c912aab-30b9-b38c-28ea-0000c93898c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.191.97:55649/i","pattern":"[url:value = 'http://123.12.191.97:55649/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5737c39d-2415-f5b5-1538-000059d74fd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.131/phantom_bins/phantom.arm","pattern":"[url:value = 'http://176.65.139.131/phantom_bins/phantom.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3343ed67-bbaa-395d-7f91-0000bdeb05b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.131/phantom_bash.sh","pattern":"[url:value = 'http://176.65.139.131/phantom_bash.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b73e4431-a4d2-5f45-ad20-000084ab5d14","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.131/phantom_bins/phantom.x86_64","pattern":"[url:value = 'http://176.65.139.131/phantom_bins/phantom.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--302e8804-bbf1-565e-d972-0000dcf3f2ce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.131/phantom_bins/phantom.mips","pattern":"[url:value = 'http://176.65.139.131/phantom_bins/phantom.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb7cdb62-3cbf-24b4-07c1-0000845a7be8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/dbg","pattern":"[url:value = 'http://176.65.139.132/bins/dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afca6404-3fd0-448d-4c34-0000895f68d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/ppc","pattern":"[url:value = 'http://176.65.139.132/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cca79759-6cae-f986-7e92-0000e1a97acb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/mips","pattern":"[url:value = 'http://176.65.139.132/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fd8bd73-fe13-bfd3-7378-00007ba219db","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/arm6","pattern":"[url:value = 'http://176.65.139.132/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad8cda5d-f2b1-dcee-da28-00000fcb1a7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/spc","pattern":"[url:value = 'http://176.65.139.132/bins/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--808ba38f-1be1-534a-c850-0000e15fac11","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/m68k","pattern":"[url:value = 'http://176.65.139.132/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--704a00dc-6004-f920-83df-0000e6ec2104","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/d.sh","pattern":"[url:value = 'http://176.65.139.132/d.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da988653-cbb3-2f6c-c264-00000981f126","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/sh4","pattern":"[url:value = 'http://176.65.139.132/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79755190-5148-f971-8b58-00008aaa1481","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/mpsl","pattern":"[url:value = 'http://176.65.139.132/bins/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--827855ca-9d9f-31a3-3765-0000f15c06a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/x86","pattern":"[url:value = 'http://176.65.139.132/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67a0e2c6-93be-786e-b6e6-0000dbca9dbd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/arm","pattern":"[url:value = 'http://176.65.139.132/bins/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6d1ecc9-d691-57c2-a31b-00006917b635","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/arm5","pattern":"[url:value = 'http://176.65.139.132/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a331991-d5f3-6c92-e19c-00002c775f7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/i686","pattern":"[url:value = 'http://176.65.139.132/bins/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18df8de5-201e-81e2-3265-0000c31e7ebe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/arm7","pattern":"[url:value = 'http://176.65.139.132/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35239654-e092-5abf-03a6-00001abf9f19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/x86_64","pattern":"[url:value = 'http://176.65.139.132/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a57576e1-3f95-c1e4-a62a-0000055ca45f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/c2","pattern":"[url:value = 'http://176.65.139.132/c2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c7c275b-980f-c514-4d7d-000017e90bb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/c1","pattern":"[url:value = 'http://176.65.139.132/c1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abfac54a-923a-791a-403c-0000629e751a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.armv6l","pattern":"[url:value = 'http://176.65.139.130/bins/bin.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80d79689-a53a-cd79-37f9-0000253e0fca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.armv5l","pattern":"[url:value = 'http://176.65.139.130/bins/bin.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--291982ff-4120-33d1-6b35-000027302363","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.i486","pattern":"[url:value = 'http://176.65.139.130/bins/bin.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2e1f40b-0688-e1c6-fb0a-00005ffe5caa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.armv7l","pattern":"[url:value = 'http://176.65.139.130/bins/bin.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99cca7c8-1ed0-b1d2-9623-0000185e267a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.armv4l","pattern":"[url:value = 'http://176.65.139.130/bins/bin.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a0037cd-9afa-6089-81af-0000fd06e083","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.mips64","pattern":"[url:value = 'http://176.65.139.130/bins/bin.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d340fafb-f2a0-41ee-b0bf-0000d56891eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.x86_64","pattern":"[url:value = 'http://176.65.139.130/bins/bin.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--355ad295-3b86-10c5-6203-0000371e20f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.armv4eb","pattern":"[url:value = 'http://176.65.139.130/bins/bin.armv4eb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--813bdc82-73bc-3df7-4369-00008a41e9f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.130/bins/bin.armv4tl","pattern":"[url:value = 'http://176.65.139.130/bins/bin.armv4tl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b025ec8f-b8d6-9d90-e58b-0000a7d07104","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.130/bins/bin.m68k","pattern":"[url:value = 'http://176.65.139.130/bins/bin.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a9d5691-555a-1a45-2e39-00006af88268","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.i686","pattern":"[url:value = 'http://176.65.139.130/bins/bin.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28dbe8c8-0096-cf3f-3f57-0000ec6cf0c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.i586","pattern":"[url:value = 'http://176.65.139.130/bins/bin.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1286fbc-38a6-998b-8b21-0000efe29d89","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.sh4","pattern":"[url:value = 'http://176.65.139.130/bins/bin.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe26e09c-ad31-a10b-d4d1-00008c0c72d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.mipsel","pattern":"[url:value = 'http://176.65.139.130/bins/bin.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17e20408-705c-62da-331e-0000d00d5251","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.powerpc","pattern":"[url:value = 'http://176.65.139.130/bins/bin.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a1d869d-d962-27e8-aac0-00000f623d03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.powerpc-440fp","pattern":"[url:value = 'http://176.65.139.130/bins/bin.powerpc-440fp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc09d859-31a8-f477-1fe2-0000a726a7de","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.mips","pattern":"[url:value = 'http://176.65.139.130/bins/bin.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e17715e6-6d1b-2700-f475-0000a0cdebd6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://144.48.123.149:37810/i","pattern":"[url:value = 'http://144.48.123.149:37810/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fed631db-b69a-bcdd-fe9c-0000dc47efd2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.mips","pattern":"[url:value = 'http://94.154.43.67/bins/David.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b04f712-7863-fb57-fe45-0000b7448198","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.mpsl","pattern":"[url:value = 'http://94.154.43.67/bins/David.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2fa050d-be24-9942-8405-0000dcb13908","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.m68k","pattern":"[url:value = 'http://94.154.43.67/bins/David.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bb234e6-445f-036e-37f2-0000c75cc8c0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.x86","pattern":"[url:value = 'http://94.154.43.67/bins/David.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4a04a4b-cd9a-6288-fce1-000054f9232c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.arm5","pattern":"[url:value = 'http://94.154.43.67/bins/David.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce6a83ea-c4fc-d23d-867a-0000edca53d8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.arm","pattern":"[url:value = 'http://94.154.43.67/bins/David.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5da91bf1-6d73-991a-0150-0000464c8cc2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.arm6","pattern":"[url:value = 'http://94.154.43.67/bins/David.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06000528-dcbf-c786-f08f-0000bf5fa6b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.ppc","pattern":"[url:value = 'http://94.154.43.67/bins/David.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4ac1852-c269-a3ba-67d2-0000c635c83e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/ohshit.sh","pattern":"[url:value = 'http://94.154.43.67/ohshit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7352e77f-fb38-a4a3-a9a3-00003f813f43","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.sh4","pattern":"[url:value = 'http://94.154.43.67/bins/David.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2aae2b67-f57d-353d-d84a-0000fef0eba7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.arm7","pattern":"[url:value = 'http://94.154.43.67/bins/David.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0446bb71-a7a7-4033-16ba-000039cbd41b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.spc","pattern":"[url:value = 'http://94.154.43.67/bins/David.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--682d32f1-1dd5-bfc1-9ddd-0000e8df5425","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.16.115:34086/bin.sh","pattern":"[url:value = 'http://110.36.16.115:34086/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e78be04-b405-79e4-86c9-0000d7e79704","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.186.105:46982/bin.sh","pattern":"[url:value = 'http://42.234.186.105:46982/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b53d2e04-6869-fe94-b0eb-0000a010a8fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.155.69:33600/bin.sh","pattern":"[url:value = 'http://182.121.155.69:33600/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ff629f5-01e9-3521-a9a6-000057e13c78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.16.115:34086/i","pattern":"[url:value = 'http://110.36.16.115:34086/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4eac546b-9f09-4de1-8ecd-0000b14316b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.233.226:51559/i","pattern":"[url:value = 'http://110.39.233.226:51559/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--111b9985-432c-d8c6-a9a5-0000396e646b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://212.169.147.128:38805/bin.sh","pattern":"[url:value = 'http://212.169.147.128:38805/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17381db3-822a-c4a1-15eb-0000e400d172","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.115.219:56227/bin.sh","pattern":"[url:value = 'http://123.13.115.219:56227/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2be1ac86-0497-216c-6a78-0000c47103bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://200.115.102.2:47663/i","pattern":"[url:value = 'http://200.115.102.2:47663/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ff2a570-21a9-64c4-7d71-00002044f63d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.203.138.135:48639/bin.sh","pattern":"[url:value = 'http://115.203.138.135:48639/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d89f3afe-dcf6-b986-f1a8-00000e354b00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.18.240:56348/i","pattern":"[url:value = 'http://219.156.18.240:56348/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c77f929-5963-f1f0-6e9a-0000c8f586e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.202.24.36:37993/bin.sh","pattern":"[url:value = 'http://27.202.24.36:37993/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fecbd995-2f82-823a-c6c1-000053e25a25","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.33.47:57035/i","pattern":"[url:value = 'http://61.52.33.47:57035/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--564a837c-2d0e-a2ab-6d8a-00002f3ab7ca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://202.1.26.69:42948/bin.sh","pattern":"[url:value = 'http://202.1.26.69:42948/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d1d4cc9-0e6c-76fc-c9d1-000055c284fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.8.135.142:50653/bin.sh","pattern":"[url:value = 'http://66.8.135.142:50653/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3be91ff-00f3-d02e-a5fb-00000e6d5450","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.12.14:38104/bin.sh","pattern":"[url:value = 'http://221.15.12.14:38104/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1f7d358-a933-88af-0b76-00001f15cb34","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.115.219:56227/i","pattern":"[url:value = 'http://123.13.115.219:56227/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d9b5d17-dac1-1f74-d06c-000085d799d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.198.105:41583/i","pattern":"[url:value = 'http://115.49.198.105:41583/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8754e0a2-40fa-4071-d2ff-00001cf2aa26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.203.41:58932/i","pattern":"[url:value = 'http://182.113.203.41:58932/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eff4a808-e53d-3293-785f-0000266b141d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://78.25.171.108:39654/i","pattern":"[url:value = 'http://78.25.171.108:39654/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23032efe-a1f9-f23d-d85f-0000d92243c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.64.213:36972/bin.sh","pattern":"[url:value = 'http://123.11.64.213:36972/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4af34c2d-c4da-80ea-ac89-0000bc9b33f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.73.160:37461/i","pattern":"[url:value = 'http://42.235.73.160:37461/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f9101a-831c-3e84-febc-00006b643b94","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.132.216:54527/i","pattern":"[url:value = 'http://219.155.132.216:54527/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d168e570-a630-b51f-3843-0000c0e7c3ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.51.98:44914/i","pattern":"[url:value = 'http://115.50.51.98:44914/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e04f1f8-122e-f97f-8d05-0000456b734d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.215.27:37136/i","pattern":"[url:value = 'http://182.113.215.27:37136/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50020564-6e0f-5c2a-4407-000028d1b36b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.51.98:44914/bin.sh","pattern":"[url:value = 'http://115.50.51.98:44914/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd1872e0-2095-4071-5716-000053f11691","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.224.62:58009/i","pattern":"[url:value = 'http://182.113.224.62:58009/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afa05f60-23ed-88ae-6e0a-000057546c52","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.203.255:46437/i","pattern":"[url:value = 'http://182.126.203.255:46437/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bacab5c8-2d35-cd23-be60-000089c9f3bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.155.31:57509/bin.sh","pattern":"[url:value = 'http://115.62.155.31:57509/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72442366-c4ba-9c4b-f85e-0000773400a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.172.186.165:43638/i","pattern":"[url:value = 'http://103.172.186.165:43638/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21b60bf2-be56-5b3d-d05f-000083c02d43","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.46.36:60566/i","pattern":"[url:value = 'http://123.12.46.36:60566/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa01160f-e31b-ab8c-8580-000094b58778","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.143.37:55447/i","pattern":"[url:value = 'http://105.186.143.37:55447/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf902995-e829-8ee4-f71e-0000bbe733d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.150.57.254:59568/i","pattern":"[url:value = 'http://175.150.57.254:59568/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c64562bc-5dc6-cae2-b539-0000694ffe26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.10.58.106:59256/i","pattern":"[url:value = 'http://123.10.58.106:59256/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76f83772-f6a6-3e44-409c-0000806223fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.155.31:57509/i","pattern":"[url:value = 'http://115.62.155.31:57509/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8996d244-6cd2-7389-4916-00002987f1d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://178.141.132.110:51968/i","pattern":"[url:value = 'http://178.141.132.110:51968/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e13ca23a-2e17-311e-ff20-00006ed487e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.218.50:48585/bin.sh","pattern":"[url:value = 'http://222.140.218.50:48585/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0eed49ad-d741-aa3e-0d1a-0000dad6e11a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.129.131.48:48702/i","pattern":"[url:value = 'http://123.129.131.48:48702/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--928f5e6e-e5d2-114e-4497-0000ef004d7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.236.8:39421/i","pattern":"[url:value = 'http://125.47.236.8:39421/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--746d08c5-186d-f5fa-5854-000098c8869c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.8.35.65:47755/i","pattern":"[url:value = 'http://123.8.35.65:47755/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31b852f4-8892-84f3-9baf-00000b8c9afb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.146.236:54204/i","pattern":"[url:value = 'http://125.45.146.236:54204/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3798c839-a0e2-3f80-4074-0000223bddb6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://58.208.16.252:3588/i","pattern":"[url:value = 'http://58.208.16.252:3588/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6e87d5e-c817-9063-2b9a-0000a6142b13","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.5.247.27:50140/bin.sh","pattern":"[url:value = 'http://42.5.247.27:50140/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--156e6512-db83-7df6-e644-00005954e118","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.97.90.188:53553/bin.sh","pattern":"[url:value = 'http://36.97.90.188:53553/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd212b70-c2e3-f75b-db09-00009a9ec014","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.97.90.188:53553/i","pattern":"[url:value = 'http://36.97.90.188:53553/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b0fb22b-d127-c466-6f85-000086223d1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://162.246.26.77:54746/bin.sh","pattern":"[url:value = 'http://162.246.26.77:54746/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55793f49-86b8-64b4-b1ba-0000fa3a1010","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.203.41:58932/bin.sh","pattern":"[url:value = 'http://182.113.203.41:58932/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db855758-295f-1f6a-1510-0000fef18641","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.8.135.142:50653/i","pattern":"[url:value = 'http://66.8.135.142:50653/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4551a0a4-fcc5-9b0f-a622-0000986c6ddc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.69.34:57222/bin.sh","pattern":"[url:value = 'http://182.127.69.34:57222/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e7a9833-9c3e-a100-9389-0000db1386c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.251.225.122:36907/bin.sh","pattern":"[url:value = 'http://112.251.225.122:36907/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5187a86e-613e-ee2e-46ae-0000a33d83b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.180.66.105:43207/bin.sh","pattern":"[url:value = 'http://42.180.66.105:43207/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23140b4f-086f-3e0e-4b22-0000769e82c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.56.103:35641/bin.sh","pattern":"[url:value = 'http://125.45.56.103:35641/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce1c4b5c-889f-9e80-2593-0000965c5835","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.115.246.124:41208/bin.sh","pattern":"[url:value = 'http://119.115.246.124:41208/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83e5fa61-dac8-1ed1-17a2-00008350fbfa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.2.23:55597/i","pattern":"[url:value = 'http://125.41.2.23:55597/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a46752bc-52be-d009-4595-000063698953","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://178.141.132.110:51968/bin.sh","pattern":"[url:value = 'http://178.141.132.110:51968/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--822f072b-91ed-89ca-253e-000024fe47b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.157.187:43642/bin.sh","pattern":"[url:value = 'http://42.230.157.187:43642/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--014c340d-6a0d-d84a-203d-000038ee28b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.136.5.189:45058/bin.sh","pattern":"[url:value = 'http://110.136.5.189:45058/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--798b91a2-5022-5e29-9f9a-00003cba2d2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.8.35.65:47755/bin.sh","pattern":"[url:value = 'http://123.8.35.65:47755/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44485420-5131-fb45-e52f-00006aeb52f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.191.97:55649/bin.sh","pattern":"[url:value = 'http://123.12.191.97:55649/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f48e18fb-f8d0-63e8-89ae-0000c5fcef15","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.73.172.141:48914/bin.sh","pattern":"[url:value = 'http://39.73.172.141:48914/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--397e33ab-c9bb-058e-a29a-0000628dce1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.56.103:35641/i","pattern":"[url:value = 'http://125.45.56.103:35641/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad5e6dd1-500c-268a-7404-000024bd731d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.197.124:40018/bin.sh","pattern":"[url:value = 'http://222.140.197.124:40018/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5dbf536-e382-7964-d8e3-0000ac5ac2cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.147.114:34219/i","pattern":"[url:value = 'http://115.48.147.114:34219/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb3875d6-68b2-e9ca-756c-0000073839ca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.151.112:58571/i","pattern":"[url:value = 'http://222.138.151.112:58571/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a13c236-f0bb-567c-a68a-0000a9e22814","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.220.238.254:42959/i","pattern":"[url:value = 'http://222.220.238.254:42959/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cd4713f-44a8-a6b7-5169-00006cdbb955","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.221.246.187:34948/i","pattern":"[url:value = 'http://27.221.246.187:34948/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c749996-28e2-c088-2a23-0000fa0305f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.115.36.34:51030/bin.sh","pattern":"[url:value = 'http://119.115.36.34:51030/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f77bceee-951a-31b6-d9f6-0000c5a4ea87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.191.110:60559/bin.sh","pattern":"[url:value = 'http://42.234.191.110:60559/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c98247a-8b83-32f4-0005-0000a22c5274","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.85.112:47091/bin.sh","pattern":"[url:value = 'http://182.116.85.112:47091/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e5d216c-32ac-3596-e7ff-00002cfe4f7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.191.110:60559/i","pattern":"[url:value = 'http://42.234.191.110:60559/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07952194-211d-454f-2d4c-0000029627ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.148.216.12:43983/bin.sh","pattern":"[url:value = 'http://123.148.216.12:43983/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57dce9b8-48a8-1519-9439-00003fe23c0b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.52.171:42860/i","pattern":"[url:value = 'http://125.44.52.171:42860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb3ad6fb-6e0b-a6a0-ec21-00005c89624f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://213.177.179.32/zot","pattern":"[url:value = 'http://213.177.179.32/zot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7645deaf-de60-fef9-c3c0-00003f5f020b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.197.124:40018/i","pattern":"[url:value = 'http://222.140.197.124:40018/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb3d0847-50f9-1988-9aa0-000011121849","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.241.62:53088/bin.sh","pattern":"[url:value = 'http://115.55.241.62:53088/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad7eb39a-4189-c630-c141-00007ca7d965","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://83.219.1.198:35955/i","pattern":"[url:value = 'http://83.219.1.198:35955/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--349e9ba1-b721-bf02-d64d-0000a9ce9f5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.143.37:55447/bin.sh","pattern":"[url:value = 'http://105.186.143.37:55447/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3711cea-4cb5-5359-e8eb-000091760cfc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://212.169.147.128:38805/i","pattern":"[url:value = 'http://212.169.147.128:38805/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a57d199-3dad-d405-31f3-00006b98f6e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.175.7.234:37031/bin.sh","pattern":"[url:value = 'http://175.175.7.234:37031/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0d20755-c5a9-5b50-54e1-0000b99d8c6a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.18.255:59219/i","pattern":"[url:value = 'http://125.44.18.255:59219/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e53b37d6-d4e5-8240-177f-00005c7e45d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.5.247.27:50140/i","pattern":"[url:value = 'http://42.5.247.27:50140/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5130d6eb-26af-04f3-9636-0000a07a288b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://95.9.35.137:54934/bin.sh","pattern":"[url:value = 'http://95.9.35.137:54934/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7291f94c-c942-cfa5-fea0-0000cf80c85e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.173.78.13:52046/bin.sh","pattern":"[url:value = 'http://175.173.78.13:52046/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--281f9ab4-8ac2-4f69-5a61-000030877c2f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.189.81:42693/bin.sh","pattern":"[url:value = 'http://123.14.189.81:42693/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7be9b52c-bfe8-2f86-1965-00008545fa70","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.185.130:46692/bin.sh","pattern":"[url:value = 'http://115.57.185.130:46692/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceb45a9d-dcb1-d3a5-1ddd-00008de5ac88","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.151.112:58571/bin.sh","pattern":"[url:value = 'http://222.138.151.112:58571/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04822737-3f6e-1af6-7108-00000c21e6d6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.132.216:54527/bin.sh","pattern":"[url:value = 'http://219.155.132.216:54527/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3e9d186-fed5-c0d4-0ec6-0000503b8cdd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.33.47:57035/bin.sh","pattern":"[url:value = 'http://61.52.33.47:57035/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--309e1b89-32a0-e292-b84b-0000a4131048","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.137.195.76:33907/i","pattern":"[url:value = 'http://61.137.195.76:33907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4721635c-35a8-85c5-194b-00009369ba07","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://83.219.1.198:35955/bin.sh","pattern":"[url:value = 'http://83.219.1.198:35955/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eab217bc-e0d2-8dac-d3a6-000018de1406","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.85.134.175:46174/i","pattern":"[url:value = 'http://42.85.134.175:46174/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1733cd35-9efe-f070-1b34-00001752aad7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.215.99:50083/bin.sh","pattern":"[url:value = 'http://115.57.215.99:50083/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64c50dde-7b95-5700-c60a-00002dc11582","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.219.183:55986/i","pattern":"[url:value = 'http://175.149.219.183:55986/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82832241-7fe9-c207-eda2-0000562d3661","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.233.226:51559/bin.sh","pattern":"[url:value = 'http://110.39.233.226:51559/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47086850-6113-a82b-254e-00003b3502c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.218.50:48585/i","pattern":"[url:value = 'http://222.140.218.50:48585/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--397fdf19-bc51-1ab6-32d1-0000219b6815","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.10.58.106:59256/bin.sh","pattern":"[url:value = 'http://123.10.58.106:59256/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e9edbaf-4093-0af0-a1d3-00005329fdea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.194.160:52311/bin.sh","pattern":"[url:value = 'http://120.28.194.160:52311/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5626c54f-b3d5-55cf-c0e1-0000eb3029f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.151.64.247:42583/i","pattern":"[url:value = 'http://175.151.64.247:42583/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d39ea982-f916-273a-ccc7-00007eb53370","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.2.69:46177/i","pattern":"[url:value = 'http://182.117.2.69:46177/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d97aa1e7-6b43-d069-d39f-00005f1796d8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.228.87:54535/i","pattern":"[url:value = 'http://219.155.228.87:54535/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bb52b1e-3777-d755-7739-00002fb571d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.185.130:46692/i","pattern":"[url:value = 'http://115.57.185.130:46692/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7ca75fe-caeb-2481-60d7-000062d5bdae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.159.186:42538/i","pattern":"[url:value = 'http://125.40.159.186:42538/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69c6870d-4a2b-ad63-1c5c-0000fa6bbf9d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.14.94:38720/bin.sh","pattern":"[url:value = 'http://221.14.14.94:38720/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9d199ae-e810-211a-3a05-000076c7e61c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.195.40:53219/bin.sh","pattern":"[url:value = 'http://112.198.195.40:53219/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0965093-6323-a0fd-5f8f-0000a8f428d2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.118.145:47315/i","pattern":"[url:value = 'http://61.53.118.145:47315/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e2f291a-d958-0dbb-fcf8-00000a50c184","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.46.36:60566/bin.sh","pattern":"[url:value = 'http://123.12.46.36:60566/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88f7f615-d806-ddf5-7aa7-00008fa40539","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.137.197.66:51494/bin.sh","pattern":"[url:value = 'http://61.137.197.66:51494/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64984b9a-0194-348c-232f-0000e9abf554","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.2.23:55597/bin.sh","pattern":"[url:value = 'http://125.41.2.23:55597/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5d5248b-3eb3-bd93-1b24-00001e4776e7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.221.246.187:34948/bin.sh","pattern":"[url:value = 'http://27.221.246.187:34948/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52dfde8d-df62-24f5-3690-0000144ceafb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.215.99:50083/i","pattern":"[url:value = 'http://115.57.215.99:50083/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec24814c-6881-096c-4c70-0000936d7c3d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.85.134.175:46174/bin.sh","pattern":"[url:value = 'http://42.85.134.175:46174/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eb579c5-7f95-8e88-0233-000026e49497","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.14.94:38720/i","pattern":"[url:value = 'http://221.14.14.94:38720/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41aa7c44-c3fc-d3ea-9096-0000366c1cff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.18.240:56348/bin.sh","pattern":"[url:value = 'http://219.156.18.240:56348/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d8112b2-0ee7-ea17-1329-0000d0e7ac28","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.230.51.31:34338/bin.sh","pattern":"[url:value = 'http://113.230.51.31:34338/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96b4b374-1767-29cd-acde-0000a46a0f5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.229.171:36842/bin.sh","pattern":"[url:value = 'http://219.155.229.171:36842/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4b51da7-2806-c1fb-4868-00006c2625a0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.232.174:49324/i","pattern":"[url:value = 'http://222.137.232.174:49324/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a94dfaa-5a4a-712d-89b8-0000d15b13cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.129.144.52:57834/bin.sh","pattern":"[url:value = 'http://182.129.144.52:57834/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25f0d6ea-dd91-5a99-0d03-00003adc8078","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.159.186:42538/bin.sh","pattern":"[url:value = 'http://125.40.159.186:42538/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75c2fa8f-a0de-061e-ca6a-00008526b3cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.85.112:47091/i","pattern":"[url:value = 'http://182.116.85.112:47091/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--684c608e-bc6f-092a-340a-0000054a1550","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.151.73.48:41032/i","pattern":"[url:value = 'http://175.151.73.48:41032/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--217c4a0e-206b-35f6-440f-0000adcdf21d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://114.228.239.251:54062/i","pattern":"[url:value = 'http://114.228.239.251:54062/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6e515aa-5de6-3ef7-182c-0000c74c6d5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.226.228:44054/i","pattern":"[url:value = 'http://27.37.226.228:44054/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1582c38d-5235-c63e-c49d-0000fefaabe9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.225.220.81:55027/i","pattern":"[url:value = 'http://42.225.220.81:55027/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94a1053f-6285-267d-cf1d-000007e780ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.120.150:46472/i","pattern":"[url:value = 'http://182.119.120.150:46472/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbbf3c24-b13b-f2f6-ca86-0000e31f7ccb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.220.238.254:42959/bin.sh","pattern":"[url:value = 'http://222.220.238.254:42959/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e876a64-c165-cd35-0271-00005766b392","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.39.216:48007/i","pattern":"[url:value = 'http://222.137.39.216:48007/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbfcab9f-6ff7-c267-0a1b-0000fbc161ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://140.237.6.81:41787/i","pattern":"[url:value = 'http://140.237.6.81:41787/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1caa21c3-5262-a6b5-b62a-0000dd0332be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.242.62.77:52860/i","pattern":"[url:value = 'http://112.242.62.77:52860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a1fe838-5033-dbc1-3c8e-0000c5a185cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.188.223.103:33612/i","pattern":"[url:value = 'http://123.188.223.103:33612/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7109b6c5-7641-470d-a47a-0000a851a0ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.203.31.123:48146/i","pattern":"[url:value = 'http://115.203.31.123:48146/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94c18c53-2abd-99ab-6f5e-0000e1d9f0b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.69.88.195:51348/i","pattern":"[url:value = 'http://36.69.88.195:51348/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9ac3fda-a063-2c48-feb3-0000f3d6305e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.76.100.36/syss","pattern":"[url:value = 'http://223.76.100.36/syss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--722fbadf-fbf6-8358-f4cb-0000c7584cba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.76.100.36/amd","pattern":"[url:value = 'http://223.76.100.36/amd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--017dc03a-9536-114a-f20d-000038c4ff26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.186.105:46982/i","pattern":"[url:value = 'http://42.234.186.105:46982/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f029cc18-f3cf-65ed-2f40-0000c3beb7b8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.228.87:54535/bin.sh","pattern":"[url:value = 'http://219.155.228.87:54535/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f06968cd-714c-d0a7-bf2c-0000f44b781e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://87.120.104.147:8080/d/installer-4","pattern":"[url:value = 'http://87.120.104.147:8080/d/installer-4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44a2b13f-fac2-6207-7f7e-00001e47ba7a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.136.11:53679/i","pattern":"[url:value = 'http://42.235.136.11:53679/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c48d14e2-6f2e-2e08-008c-0000e3b7696c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.70.197.245:54778/bin.sh","pattern":"[url:value = 'http://36.70.197.245:54778/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d24d0717-e174-289c-a7dd-0000aa335b63","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.193.159:51649/i","pattern":"[url:value = 'http://125.42.193.159:51649/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d25159a-23b9-5a3a-d0fd-000078434ae6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.101.179:51284/i","pattern":"[url:value = 'http://27.37.101.179:51284/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06c4b197-7e66-c13d-8b92-00006dfd728d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.36.213:55623/bin.sh","pattern":"[url:value = 'http://125.43.36.213:55623/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f480240-6069-0332-ac6f-0000cedd6361","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_59d28a25d618df87.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_59d28a25d618df87.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbd8cd14-d574-f99d-c35e-00001905bd1c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.152.192:37513/bin.sh","pattern":"[url:value = 'http://61.53.152.192:37513/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbb81fd2-b79c-8d3c-56b3-0000729b910b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.18.255:59219/bin.sh","pattern":"[url:value = 'http://125.44.18.255:59219/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a132a24e-5a15-0336-235e-0000da946a2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.36.213:55623/i","pattern":"[url:value = 'http://125.43.36.213:55623/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77430d76-a1f9-81f9-82e2-0000fe713f5c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.86.83:58585/bin.sh","pattern":"[url:value = 'http://110.36.86.83:58585/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--725546e0-1daf-92d5-2d77-0000e0b6d884","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.86.83:58585/i","pattern":"[url:value = 'http://110.36.86.83:58585/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c3f70c7-7f08-f2e2-5cc7-0000f9cf91cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.52.171:42860/bin.sh","pattern":"[url:value = 'http://125.44.52.171:42860/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c47f77e-df8b-b133-61db-0000195ca3d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.50.219:33430/i","pattern":"[url:value = 'http://42.235.50.219:33430/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b408eb9f-0ed9-eea8-94dd-0000b16818c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://serdaregitim.com/144.exe","pattern":"[url:value = 'http://serdaregitim.com/144.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4252ad5b-49d9-2737-ddd6-00000a5376c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://serdaregitim.com/3.exe","pattern":"[url:value = 'http://serdaregitim.com/3.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--883583d8-224b-f02e-a4ce-000031f12e05","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://166.0.192.57/loader","pattern":"[url:value = 'http://166.0.192.57/loader']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--873aeecc-6277-b25c-e751-00006a322ddd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.87.217.20:54835/bin.sh","pattern":"[url:value = 'http://39.87.217.20:54835/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f809643-7c39-4891-a5a6-00004c09d8c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.87.217.20:54835/i","pattern":"[url:value = 'http://39.87.217.20:54835/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd5c959a-f7ad-7ede-742c-00006a191bc5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.238.78:41991/bin.sh","pattern":"[url:value = 'http://222.138.238.78:41991/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f115fd24-bc64-7923-c093-000007fdd078","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.115.176:33524/bin.sh","pattern":"[url:value = 'http://182.121.115.176:33524/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15cfa2b1-e91a-bbba-7999-0000a700d0d6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.115.176:33524/i","pattern":"[url:value = 'http://182.121.115.176:33524/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f952594a-3c9b-7e56-adb3-000067679b84","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.54.173:38816/bin.sh","pattern":"[url:value = 'http://42.230.54.173:38816/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44bfa500-4fe4-429b-bb28-00007cd8a35b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.109.232.82:53587/bin.sh","pattern":"[url:value = 'http://101.109.232.82:53587/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd744067-0d66-c6db-1ea7-00001eff62e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.206.161:49109/bin.sh","pattern":"[url:value = 'http://182.113.206.161:49109/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96b23f4a-90c2-0cfd-7201-0000f4cab5b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.238.78:41991/i","pattern":"[url:value = 'http://222.138.238.78:41991/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6c675dd-0c1d-22e4-eea6-00005168092d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.54.173:38816/i","pattern":"[url:value = 'http://42.230.54.173:38816/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--053971b3-0ff6-2c76-33fa-00005a4fc55d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.109.232.82:53587/i","pattern":"[url:value = 'http://101.109.232.82:53587/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a203eed2-b7e8-a642-7e1e-0000238f2b8a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.206.161:49109/i","pattern":"[url:value = 'http://182.113.206.161:49109/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39c80cc0-37bb-3cdf-9151-00005cd3d659","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.226.78.32:51467/i","pattern":"[url:value = 'http://42.226.78.32:51467/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df0cbab6-5b1c-fb4c-0e2f-00002239cdca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.119.9:50130/bin.sh","pattern":"[url:value = 'http://182.116.119.9:50130/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--876cf71a-777c-7840-b666-0000fa3e3986","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://179.108.89.220:55094/i","pattern":"[url:value = 'http://179.108.89.220:55094/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aef668de-747d-b4e2-7b16-00008a9bebbc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.119.9:50130/i","pattern":"[url:value = 'http://182.116.119.9:50130/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19e910c1-1f5d-fba4-7ac7-0000f70ff14d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.181.39:44858/bin.sh","pattern":"[url:value = 'http://27.215.181.39:44858/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cedcf7f9-447a-ab78-5598-00009afbe4ba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.181.39:44858/i","pattern":"[url:value = 'http://27.215.181.39:44858/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b434b06e-d202-f591-3cd5-0000734ef93d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.46.253:58630/bin.sh","pattern":"[url:value = 'http://182.121.46.253:58630/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7df2b037-e756-a4b3-c6b5-000062248b4e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.46.253:58630/i","pattern":"[url:value = 'http://182.121.46.253:58630/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8362d282-42fb-43e3-7698-000006752d2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.198.105:41583/bin.sh","pattern":"[url:value = 'http://115.49.198.105:41583/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9984ddd7-f661-8599-0c80-0000a2f39ae9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.221.182:35958/bin.sh","pattern":"[url:value = 'http://110.38.221.182:35958/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e0db074-05e5-43ce-0c88-00003dfa57a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://118.232.137.101:42009/bin.sh","pattern":"[url:value = 'http://118.232.137.101:42009/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58f98632-032c-7dbd-1ce2-00007a21017d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.172.186.165:43638/bin.sh","pattern":"[url:value = 'http://103.172.186.165:43638/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db069ccb-5d6f-d85c-a0cf-00005d1b5cf7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.221.182:35958/i","pattern":"[url:value = 'http://110.38.221.182:35958/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ada811ff-802c-64a5-6a93-0000c13a7924","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.82.215:49425/bin.sh","pattern":"[url:value = 'http://222.141.82.215:49425/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0649bd63-60fc-3d54-d5b8-0000e08c1910","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://118.232.137.101:42009/i","pattern":"[url:value = 'http://118.232.137.101:42009/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7758f539-3c04-459d-7d0d-0000d3b757f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.50.219:33430/bin.sh","pattern":"[url:value = 'http://42.235.50.219:33430/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ba9aec0-a7f1-240f-ec23-0000fa5759de","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.82.215:49425/i","pattern":"[url:value = 'http://222.141.82.215:49425/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80c6c875-b147-4277-ef23-0000d768d556","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.178.168.78:33507/bin.sh","pattern":"[url:value = 'http://42.178.168.78:33507/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32fcf583-7c40-8326-06d9-0000cac54b8a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.178.168.78:33507/i","pattern":"[url:value = 'http://42.178.168.78:33507/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb537ed3-e4c3-0620-46a0-000038679a4a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.233.2:37781/bin.sh","pattern":"[url:value = 'http://115.55.233.2:37781/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e01a6d6-df4a-edc7-5125-0000f22827eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://47.215.224.64:37433/bin.sh","pattern":"[url:value = 'http://47.215.224.64:37433/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ad98508-b63d-431f-8bf8-0000439e1202","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://122.235.157.125:52016/i","pattern":"[url:value = 'http://122.235.157.125:52016/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c15925df-4b5d-f10a-6d34-000088e70ed5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.233.2:37781/i","pattern":"[url:value = 'http://115.55.233.2:37781/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ee7fbdd-2020-7f61-1c72-0000b801ac3e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://47.215.224.64:37433/i","pattern":"[url:value = 'http://47.215.224.64:37433/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4fac271-1977-c47a-d22a-000005e1e9d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.72.194:45299/i","pattern":"[url:value = 'http://110.36.72.194:45299/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d403f419-0159-b753-3531-00000e58a886","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.68.188:46150/bin.sh","pattern":"[url:value = 'http://182.117.68.188:46150/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15114933-8f1d-334f-f9bc-00009950cacc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://96.245.232.233:44492/i","pattern":"[url:value = 'http://96.245.232.233:44492/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8d56e5a-3119-cf55-e93d-0000989a8e42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.43.119:54028/i","pattern":"[url:value = 'http://110.37.43.119:54028/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4dc5980-5bcf-111c-d398-0000f15f2628","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.183.3.192:41382/bin.sh","pattern":"[url:value = 'http://119.183.3.192:41382/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e1c2656-e7a0-4c9e-3c47-00004b98c8a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.225.220.81:55027/bin.sh","pattern":"[url:value = 'http://42.225.220.81:55027/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dea8c142-6cf0-7ad1-9f91-00008d84d10b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.162.111:53842/i","pattern":"[url:value = 'http://182.121.162.111:53842/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be1c5227-9bdb-f30b-fb9f-000055f876ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_mipsel","pattern":"[url:value = 'http://45.38.249.63/data_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--906a3f94-3b1c-291c-76ad-0000fbd5f768","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_mips","pattern":"[url:value = 'http://45.38.249.63/data_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--820d5c33-f721-8062-ae63-0000bae47000","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/bbc","pattern":"[url:value = 'http://45.38.249.63/bbc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b1154be-a2e5-31a4-d7be-00008fd12e5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_powerpc","pattern":"[url:value = 'http://45.38.249.63/data_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--937a4840-a9ea-2928-9453-00000c9c95d2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_x86_64","pattern":"[url:value = 'http://45.38.249.63/data_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd1b7492-08c0-7b72-37a3-0000cbd75cf3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_arm4","pattern":"[url:value = 'http://45.38.249.63/data_arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--331515be-6081-7b12-5822-000061de9478","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_arm6","pattern":"[url:value = 'http://45.38.249.63/data_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fa4786a-ec90-656b-4abe-0000876b9f48","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_aarch64","pattern":"[url:value = 'http://45.38.249.63/data_aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa1c4404-f0f9-fd75-f7b0-0000736b3b96","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_arm5","pattern":"[url:value = 'http://45.38.249.63/data_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44122528-0d5f-8747-ceda-0000d962f31d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_arm7","pattern":"[url:value = 'http://45.38.249.63/data_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcba9c71-c1bd-6c1c-4202-00005705d8b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_x86","pattern":"[url:value = 'http://45.38.249.63/data_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48c47c7f-fbad-aeea-822c-0000b4585ad8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/arm6","pattern":"[url:value = 'http://2.26.81.46/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40823716-712e-07dc-bb6c-00007f6cd814","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_8f2a9c058325ac38.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_8f2a9c058325ac38.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--189a956e-4843-0b8f-92db-0000aad3a799","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.250.250:43654/bin.sh","pattern":"[url:value = 'http://222.142.250.250:43654/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dfc762d-d72f-0170-0529-0000098df017","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.250.250:43654/i","pattern":"[url:value = 'http://222.142.250.250:43654/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9278a792-c433-3a20-e7de-0000b579fa82","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://179.108.89.220:55094/bin.sh","pattern":"[url:value = 'http://179.108.89.220:55094/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24c5d007-e629-351b-9b13-00009b0fa02f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://220.192.252.142:56157/i","pattern":"[url:value = 'http://220.192.252.142:56157/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10e95cbf-aae1-38d8-187d-0000f5acb417","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://1.58.182.84:51623/bin.sh","pattern":"[url:value = 'http://1.58.182.84:51623/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62fbb00d-aa0a-fb4e-0592-0000320453b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.18.71:37623/i","pattern":"[url:value = 'http://42.230.18.71:37623/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d2e2558-7427-6d6b-c51f-0000a2fce713","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.18.71:37623/bin.sh","pattern":"[url:value = 'http://42.230.18.71:37623/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c587810b-ffbb-a2b8-0420-0000a9671503","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.177.126:47422/bin.sh","pattern":"[url:value = 'http://182.127.177.126:47422/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--895236e1-41d4-9c6d-b67b-0000502f5e1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.229.199:49596/bin.sh","pattern":"[url:value = 'http://27.37.229.199:49596/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b4592ec-5b86-eab8-22aa-0000114f3176","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.70.28:58014/i","pattern":"[url:value = 'http://110.36.70.28:58014/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab97099a-d2f9-b2a3-0c3a-0000bb5bc58d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.177.126:47422/i","pattern":"[url:value = 'http://182.127.177.126:47422/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83004697-bbff-da2f-2c00-0000aa0903db","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.113.119:35309/i","pattern":"[url:value = 'http://125.40.113.119:35309/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cec78f5-f731-9d7e-c064-00000923a954","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.201.110.150:57334/bin.sh","pattern":"[url:value = 'http://27.201.110.150:57334/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b69db9e4-8ad7-6b1d-f42c-0000e124c76c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.201.110.150:57334/i","pattern":"[url:value = 'http://27.201.110.150:57334/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfc739be-5669-52e7-6b87-000030324cc2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.174.68.59:47203/bin.sh","pattern":"[url:value = 'http://175.174.68.59:47203/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--751e6737-af49-1e0b-4c0c-000005e176cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://78.165.236.7:50272/bin.sh","pattern":"[url:value = 'http://78.165.236.7:50272/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4736a3c9-8502-38d6-5486-000020989295","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.146.236:54204/bin.sh","pattern":"[url:value = 'http://125.45.146.236:54204/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6786d90b-233f-50b5-edd1-0000ac02f26b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://78.165.236.7:50272/i","pattern":"[url:value = 'http://78.165.236.7:50272/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--222edaa9-d251-8bf4-e4e0-000085de0339","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.139.213:39951/bin.sh","pattern":"[url:value = 'http://59.96.139.213:39951/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1bbb7a1-f1aa-c331-f527-0000dbfb2033","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.39.216:48007/bin.sh","pattern":"[url:value = 'http://222.137.39.216:48007/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37388c34-8b64-3a54-2eb4-00006820670c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.174.68.59:47203/i","pattern":"[url:value = 'http://175.174.68.59:47203/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7fd13a7-b969-f54e-b769-00008aa2c18f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.31.205:34885/i","pattern":"[url:value = 'http://110.36.31.205:34885/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f4b08c4-5c58-ce76-ed12-00004b07696d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://138.255.178.214:43405/bin.sh","pattern":"[url:value = 'http://138.255.178.214:43405/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f35b2077-ad4e-7a6a-e7e3-0000ccf59756","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.139.213:39951/i","pattern":"[url:value = 'http://59.96.139.213:39951/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--335a2a72-29df-0ef6-d452-000047d68d61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://138.255.178.214:43405/i","pattern":"[url:value = 'http://138.255.178.214:43405/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00fba612-825f-2ac2-9839-000039e6024b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.72.21:54289/bin.sh","pattern":"[url:value = 'http://105.184.72.21:54289/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa76e1a4-8364-c125-a201-0000d404a61c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.93.114:47497/bin.sh","pattern":"[url:value = 'http://42.231.93.114:47497/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25ade7cf-2c79-209a-b6cf-0000d7dd2e88","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.183.165:44707/i","pattern":"[url:value = 'http://105.186.183.165:44707/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbea3596-71c7-44de-0283-0000ef0648f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.69.88.195:51348/bin.sh","pattern":"[url:value = 'http://36.69.88.195:51348/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73204d35-19b8-d865-b5c9-0000a86f7326","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.93.114:47497/i","pattern":"[url:value = 'http://42.231.93.114:47497/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--823c54d6-4e1a-7645-1dd8-00008ccae879","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.4.125:43311/i","pattern":"[url:value = 'http://110.36.4.125:43311/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e138016b-4831-f739-a3dd-000081ede851","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.78.165:52484/bin.sh","pattern":"[url:value = 'http://182.117.78.165:52484/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5a8ffa4-92c6-9c90-a36f-0000612e667f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.32.70:38815/i","pattern":"[url:value = 'http://105.184.32.70:38815/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1d34d0c-bcfa-f463-218c-0000a7610e0d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://lomeqpe.com/Update_bde3c4.msi","pattern":"[url:value = 'https://lomeqpe.com/Update_bde3c4.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1e2506f-7428-10c9-bdda-000043421742","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.78.165:52484/i","pattern":"[url:value = 'http://182.117.78.165:52484/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fde58ed3-1ee1-b212-13c6-00000ed96d08","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.252.78:52922/i","pattern":"[url:value = 'http://222.142.252.78:52922/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8401674-f22b-45dd-aee8-0000cdca719d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.129.133.165:47739/i","pattern":"[url:value = 'http://123.129.133.165:47739/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bd55190-d824-5a0c-28e7-00005c7cb73b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_f50d0ed2eef01870.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_f50d0ed2eef01870.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5fd7237-e6f7-edec-ffae-00000b57239b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.203.149:37425/bin.sh","pattern":"[url:value = 'http://115.63.203.149:37425/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0465d295-e14c-c2c3-6cf3-000081780dfb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.68.65:46979/bin.sh","pattern":"[url:value = 'http://110.37.68.65:46979/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4e97557-6fc1-c03c-2628-0000161baa50","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_sh4","pattern":"[url:value = 'http://62.60.249.165/main_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19d111c2-d04e-3235-eb51-0000c450c6cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_arm","pattern":"[url:value = 'http://62.60.249.165/main_arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e66e47a-45e4-1c65-eb61-000033d35ad3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_mpsl","pattern":"[url:value = 'http://62.60.249.165/main_mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ab9cd22-2171-c1f6-f641-000003567521","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_x86_64","pattern":"[url:value = 'http://62.60.249.165/main_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbb422b3-e8fd-caa2-6897-000058d03499","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_mips","pattern":"[url:value = 'http://62.60.249.165/main_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc09a6ce-eb98-01e0-26b4-0000eec65dd3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_x86","pattern":"[url:value = 'http://62.60.249.165/main_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c30519d5-605b-14c0-801f-0000945eef21","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.32.162:44822/bin.sh","pattern":"[url:value = 'http://125.44.32.162:44822/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--611004e1-79ea-c7d0-4b3f-0000258d2a38","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.34.229:59705/i","pattern":"[url:value = 'http://105.184.34.229:59705/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b61f88ab-322b-868e-0325-00005f09e82f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.106.66:43071/i","pattern":"[url:value = 'http://221.14.106.66:43071/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c7bb888-b8f9-17bc-22da-0000f09b839e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://114.228.239.251:54062/bin.sh","pattern":"[url:value = 'http://114.228.239.251:54062/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd5e6568-7960-c64e-dbd4-000026eb3c9a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.68.65:46979/i","pattern":"[url:value = 'http://110.37.68.65:46979/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23ee55d1-3432-b48c-5671-0000f8437ce4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.32.162:44822/i","pattern":"[url:value = 'http://125.44.32.162:44822/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f4873e5-1ef3-1076-c0cc-0000274ab43d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.141.211:58754/i","pattern":"[url:value = 'http://182.121.141.211:58754/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--145aa8a6-a324-2d15-fc1c-0000c4e3ea63","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.215.95:55907/bin.sh","pattern":"[url:value = 'http://219.157.215.95:55907/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75a55654-fd1b-0b60-7d0f-0000d59e6e02","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.143.158:55288/bin.sh","pattern":"[url:value = 'http://222.141.143.158:55288/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f1c4408-ff87-0653-7e6d-00007a71c227","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.29.169:56430/bin.sh","pattern":"[url:value = 'http://182.119.29.169:56430/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a316ef38-f75f-732a-661e-0000f33cab57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.215.95:55907/i","pattern":"[url:value = 'http://219.157.215.95:55907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29394689-26e8-ee53-f556-0000e3b40503","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.249.167:38186/bin.sh","pattern":"[url:value = 'http://115.57.249.167:38186/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--baf7836b-1548-66ad-f29c-00008383cde2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.249.167:38186/i","pattern":"[url:value = 'http://115.57.249.167:38186/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--489bb36c-4ce7-26cd-953f-00001d8ec015","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.191.228.111:60353/bin.sh","pattern":"[url:value = 'http://180.191.228.111:60353/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9a48bd9-65e2-23fc-888c-00007fe26d99","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.248.80:32935/bin.sh","pattern":"[url:value = 'http://115.57.248.80:32935/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25f88ff3-162c-ef11-8b64-00004c8976a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.29.169:56430/i","pattern":"[url:value = 'http://182.119.29.169:56430/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ce76465-3f1a-b527-552d-000085959591","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.191.228.111:60353/i","pattern":"[url:value = 'http://180.191.228.111:60353/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e66d4fa3-62f4-5aa0-6166-00006baae85e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.148.23:42173/bin.sh","pattern":"[url:value = 'http://115.48.148.23:42173/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--733a61a1-abf1-dbac-d289-00009626f1de","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.143.158:55288/i","pattern":"[url:value = 'http://222.141.143.158:55288/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--470007e2-74fd-d8bb-2dfe-00001151d7e0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.148.23:42173/i","pattern":"[url:value = 'http://115.48.148.23:42173/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7caefc07-95be-bd60-128e-0000785e7309","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.174.107.238:46076/i","pattern":"[url:value = 'http://175.174.107.238:46076/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ea2d091-243d-8fee-b823-0000b147909c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.201.153:36972/bin.sh","pattern":"[url:value = 'http://123.11.201.153:36972/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ce4b430-e1a6-a695-d465-0000f7d3edef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.2.135:57819/bin.sh","pattern":"[url:value = 'http://125.41.2.135:57819/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4932d811-d1a0-4e8a-f808-000068a49237","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.201.153:36972/i","pattern":"[url:value = 'http://123.11.201.153:36972/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a86ad91f-a5d0-9f70-4f20-00001e91575b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.2.135:57819/i","pattern":"[url:value = 'http://125.41.2.135:57819/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62babce6-fdc9-b0db-a4b8-00003add52f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.248.80:32935/i","pattern":"[url:value = 'http://115.57.248.80:32935/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d9913ea-00f3-8dec-1bb2-0000b83f7ab7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.6.205:46320/i","pattern":"[url:value = 'http://125.41.6.205:46320/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8edc7c5f-bdea-b30f-fe52-00009f7984a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.76.206.254:50342/bin.sh","pattern":"[url:value = 'http://116.76.206.254:50342/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18a27b90-7b07-9ef5-b4b3-0000fd769fbf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.228.78:44625/i","pattern":"[url:value = 'http://110.39.228.78:44625/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff627cc0-3b49-78a6-7614-000045efe59f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.22.249:44558/i","pattern":"[url:value = 'http://110.36.22.249:44558/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be2c01af-bccd-8d54-c2df-00000d9102ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.223.140.197:37526/bin.sh","pattern":"[url:value = 'http://117.223.140.197:37526/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c170bf57-ec92-cda8-ef0c-0000aeddbe11","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.217.139.36:39257/bin.sh","pattern":"[url:value = 'http://27.217.139.36:39257/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49c61ecc-4c6b-cfe5-5606-0000ca857299","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.223.140.197:37526/i","pattern":"[url:value = 'http://117.223.140.197:37526/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01720c58-5b8a-0a47-a566-0000846765bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.192.15:47283/bin.sh","pattern":"[url:value = 'http://222.139.192.15:47283/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74e6a33e-c4b2-de6f-9ed4-000016c02527","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_865135af23551105.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_865135af23551105.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fd5a6da-86d7-706d-7112-00007a8cc833","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.217.139.36:39257/i","pattern":"[url:value = 'http://27.217.139.36:39257/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a279e74-f141-ab63-f08e-0000ed469797","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.69.192:41745/bin.sh","pattern":"[url:value = 'http://196.189.69.192:41745/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6e1d394-cd82-229a-e82b-000073741146","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.207.141.23:38567/bin.sh","pattern":"[url:value = 'http://27.207.141.23:38567/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--508016f8-9ef8-424b-4abf-0000be815161","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.190.18.137:43516/i","pattern":"[url:value = 'http://123.190.18.137:43516/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7233f350-e443-50af-bc58-0000188bb804","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.192.15:47283/i","pattern":"[url:value = 'http://222.139.192.15:47283/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9845922c-be75-7b06-942a-000080e0a735","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.69.192:41745/i","pattern":"[url:value = 'http://196.189.69.192:41745/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49877565-5c4c-d21c-f36e-00009bfed71c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.48.166.95:59376/bin.sh","pattern":"[url:value = 'http://183.48.166.95:59376/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d909315-8181-c67c-3361-000044f86ed5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.207.141.23:38567/i","pattern":"[url:value = 'http://27.207.141.23:38567/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f25ea87-ad1e-da5d-b288-0000ff998715","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.187.158.17:55290/bin.sh","pattern":"[url:value = 'http://119.187.158.17:55290/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bada289-f9a1-9222-37ed-00002ec464f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.190.111:33526/bin.sh","pattern":"[url:value = 'http://182.127.190.111:33526/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fba24a2e-027a-3a09-e960-0000f4eb4bf4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/omega/file.exe","pattern":"[url:value = 'http://62.60.226.140/files/omega/file.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d506c90d-df35-8bb3-0168-00000ff51f1a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.230.51.31:34338/i","pattern":"[url:value = 'http://113.230.51.31:34338/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--904c6fd1-f8ba-0d21-011d-0000e53260ea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.48.166.95:59376/i","pattern":"[url:value = 'http://183.48.166.95:59376/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58b78216-664d-f1a5-b0e7-0000b06d46d2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.34.137:45967/bin.sh","pattern":"[url:value = 'http://182.116.34.137:45967/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--748d28db-f0b7-d182-22b3-0000bbfece3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.62.97:46336/i","pattern":"[url:value = 'http://182.119.62.97:46336/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f676717c-04b9-7275-c29c-000026df48d2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.190.111:33526/i","pattern":"[url:value = 'http://182.127.190.111:33526/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d38a2343-f8f4-fb61-fe28-0000356e6bbb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.124.9.99:47755/i","pattern":"[url:value = 'http://182.124.9.99:47755/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c016fe3-766b-1b1e-4d28-0000cab06cb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://95.13.17.211:57271/i","pattern":"[url:value = 'http://95.13.17.211:57271/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b538220b-5f03-fce8-4421-000077935444","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.34.137:45967/i","pattern":"[url:value = 'http://182.116.34.137:45967/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2734b930-eaf1-9e46-d9ce-0000c4ae415d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.120.10.85:50338/bin.sh","pattern":"[url:value = 'http://182.120.10.85:50338/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ec778d5-e0c4-0fa7-1a28-00009dd216c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.105.170:60232/i","pattern":"[url:value = 'http://196.190.105.170:60232/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68ebf153-ac70-f5b8-4e0e-0000a0f33e23","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.43.119:54028/bin.sh","pattern":"[url:value = 'http://110.37.43.119:54028/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9abe43df-3bad-7090-8300-0000852eb574","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.196.94:44453/bin.sh","pattern":"[url:value = 'http://222.140.196.94:44453/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73ceb1de-c1cb-acb1-ed89-0000f2632da9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.196.94:44453/i","pattern":"[url:value = 'http://222.140.196.94:44453/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--031ddc07-b4a3-f747-8b44-0000bfb2b5e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.42:48403/bin.sh","pattern":"[url:value = 'http://210.208.110.42:48403/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2364339a-9e4f-9d24-72c4-0000ba46b8da","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.85.15.27:60468/bin.sh","pattern":"[url:value = 'http://42.85.15.27:60468/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7438cdb-98c7-1295-6300-00000d4958c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.86.137.34:54189/i","pattern":"[url:value = 'http://42.86.137.34:54189/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad23381a-83f1-6531-16bd-0000503fae2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.58.252.41:50980/i","pattern":"[url:value = 'http://42.58.252.41:50980/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6926ab9-1e8b-11e1-e179-0000bfeaf1c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.180.57.85:57947/i","pattern":"[url:value = 'http://42.180.57.85:57947/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edc00995-759c-c87a-1eeb-0000450846a1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.24.140:51609/i","pattern":"[url:value = 'http://110.36.24.140:51609/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e899ffc-a019-9db0-a38d-00002a156275","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.91.33:35795/i","pattern":"[url:value = 'http://110.36.91.33:35795/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55e99e17-a985-20eb-d945-0000db0b0d46","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.72.182:41495/i","pattern":"[url:value = 'http://110.36.72.182:41495/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--302fe188-13af-4eef-742d-0000f7e4f052","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.1.200:60120/i","pattern":"[url:value = 'http://110.36.1.200:60120/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--861d2fa4-7f23-4b26-772e-00005b1de420","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.22.249:44558/bin.sh","pattern":"[url:value = 'http://110.36.22.249:44558/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58837e62-53a1-5bfb-2ae4-00007a28dc5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.35.226:40707/bin.sh","pattern":"[url:value = 'http://196.189.35.226:40707/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93ad8339-6626-417e-843a-000067058fff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.94.51:47055/i","pattern":"[url:value = 'http://123.14.94.51:47055/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01fb959a-4f6c-2bdd-97ad-000022ab2d42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.120.10.85:50338/i","pattern":"[url:value = 'http://182.120.10.85:50338/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fae9d4b-5562-8aac-df49-00007d385d78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.120.150:46472/bin.sh","pattern":"[url:value = 'http://182.119.120.150:46472/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c1d6918-6f34-9015-fcbd-0000317a0b2d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://185.141.233.178:38076/i","pattern":"[url:value = 'http://185.141.233.178:38076/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6489f685-9430-a4a1-0279-0000c50ae11e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://79.106.74.167:44091/i","pattern":"[url:value = 'http://79.106.74.167:44091/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3460eb40-ec6b-d4d3-2061-000074d48325","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.77.145:55241/i","pattern":"[url:value = 'http://163.142.77.145:55241/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0214d7b-7bfc-4309-9f8c-0000a56ce3a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.85.43.191:49489/bin.sh","pattern":"[url:value = 'http://182.85.43.191:49489/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fb69b60-b053-e4fd-72bc-00000c16cbc9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.136.169.228:49263/i","pattern":"[url:value = 'http://222.136.169.228:49263/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae055804-bac0-dce4-3d15-0000f177ce0f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.254.40:36271/i","pattern":"[url:value = 'http://182.119.254.40:36271/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b52b1bff-b32f-9139-b7f5-00004f64432c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.160.44:57722/i","pattern":"[url:value = 'http://222.140.160.44:57722/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--055fc2d8-6d48-c32f-db78-000075f4d88a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.87.101:45262/bin.sh","pattern":"[url:value = 'http://175.149.87.101:45262/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b62a9140-2d76-64e7-7d97-0000370dba55","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.136.169.228:49263/bin.sh","pattern":"[url:value = 'http://222.136.169.228:49263/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ef39c7e-0e78-bef6-4968-00005359667a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.113.206:54138/i","pattern":"[url:value = 'http://182.116.113.206:54138/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79e9e650-7b6b-1fbb-1e87-0000493865d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.87.101:45262/i","pattern":"[url:value = 'http://175.149.87.101:45262/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f64ca02-9ebf-65b4-d6eb-00008c380b6a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://74.127.168.68:33881/bin.sh","pattern":"[url:value = 'http://74.127.168.68:33881/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--604db660-bccc-1168-527b-00000653bafd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.146.231.101:47081/bin.sh","pattern":"[url:value = 'http://175.146.231.101:47081/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--399d05c5-14ed-ea61-960e-000090db0a80","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://213.177.179.52/got","pattern":"[url:value = 'http://213.177.179.52/got']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fe79ed9-f69b-1a2f-4aad-0000a7829b41","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.156.139.177:51830/bin.sh","pattern":"[url:value = 'http://27.156.139.177:51830/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84a4c8a9-4b3f-61ef-63ad-0000f0471972","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.83.220:36412/i","pattern":"[url:value = 'http://125.40.83.220:36412/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef2ed00d-43c3-36da-64c2-0000a1401ec2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://140.237.44.234:41542/i","pattern":"[url:value = 'http://140.237.44.234:41542/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e13ec8f-1009-6886-90af-0000686ae433","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.116.142.166:55362/bin.sh","pattern":"[url:value = 'http://119.116.142.166:55362/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a367c386-f342-63fe-01d1-000022cf5249","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://140.237.44.234:41542/bin.sh","pattern":"[url:value = 'http://140.237.44.234:41542/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff0855ec-e8ab-992f-3836-00009d994db6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.64.252:52809/i","pattern":"[url:value = 'http://42.231.64.252:52809/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff9c90ae-a75e-d5de-14ab-0000af68604e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.14.56:52752/i","pattern":"[url:value = 'http://221.15.14.56:52752/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83e5b2cd-caa1-c699-8fd0-00006b929af3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.122.70:48495/i","pattern":"[url:value = 'http://125.40.122.70:48495/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c49e4caa-dcbe-4e57-8834-00006be22396","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.54.4.193:56949/i","pattern":"[url:value = 'http://37.54.4.193:56949/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a5643e3-4126-5c9d-a038-0000068ec34a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.64.252:52809/bin.sh","pattern":"[url:value = 'http://42.231.64.252:52809/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5151065-102f-56a1-0457-00009d75ba2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.161.116.2:53893/i","pattern":"[url:value = 'http://124.161.116.2:53893/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27335015-838b-f202-3163-0000ebf01850","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.4.250.38:55169/i","pattern":"[url:value = 'http://42.4.250.38:55169/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8048fbd-7fdb-0028-0659-0000828668c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.21.106:38226/i","pattern":"[url:value = 'http://222.141.21.106:38226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16059879-f75a-c38b-038a-000066a4e2fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.201.196:57604/bin.sh","pattern":"[url:value = 'http://110.38.201.196:57604/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fee6233-be85-8d28-57a2-0000c222d852","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.85.43.191:49489/i","pattern":"[url:value = 'http://182.85.43.191:49489/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0f37f26-e568-80c3-1f83-000044a5b9d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.207.229.26:38938/bin.sh","pattern":"[url:value = 'http://27.207.229.26:38938/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61ee9ad1-7303-7a9b-3117-0000b421b727","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://74.127.168.68:33881/i","pattern":"[url:value = 'http://74.127.168.68:33881/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cae95c9e-501e-7348-94ac-0000cc23981a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.233.94.20:34018/i","pattern":"[url:value = 'http://42.233.94.20:34018/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5af90d5-779d-9e92-3cf8-0000481c86a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.34.242.96:52648/i","pattern":"[url:value = 'http://37.34.242.96:52648/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--744c5dea-f1ed-28c9-6038-0000207c3e0e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.111.17:57080/i","pattern":"[url:value = 'http://175.148.111.17:57080/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f012ba7a-cf53-42f0-289c-000040839fa2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.185.91.133:52353/bin.sh","pattern":"[url:value = 'http://123.185.91.133:52353/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--714c2b80-c7cb-fe0d-d4e2-00001c59ae8d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.156.139.177:51830/i","pattern":"[url:value = 'http://27.156.139.177:51830/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff46fa30-00d8-989a-fa84-0000a1f14d53","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.111.17:57080/bin.sh","pattern":"[url:value = 'http://175.148.111.17:57080/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0973c49b-0b26-a702-d8db-000063aa207a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.4.250.38:55169/bin.sh","pattern":"[url:value = 'http://42.4.250.38:55169/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ce69cc0-5a60-a974-5d99-0000f1445189","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.77.145:55241/bin.sh","pattern":"[url:value = 'http://163.142.77.145:55241/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96a6c02d-d4e4-3980-88f9-000030ac4118","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.85.15.27:60468/i","pattern":"[url:value = 'http://42.85.15.27:60468/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92987675-2b11-3718-2f8d-000021fd2a81","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.235.207.2:39666/i","pattern":"[url:value = 'http://124.235.207.2:39666/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a859b70-6ed4-2bf3-ca39-0000afe0091a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.189.159.141:53442/i","pattern":"[url:value = 'http://123.189.159.141:53442/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cc3ac03-e9c1-ce35-d9ff-0000f6ef9b04","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.196.33:49245/i","pattern":"[url:value = 'http://125.47.196.33:49245/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e30d327b-d929-692f-848a-00003f13ea30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.130:40967/bin.sh","pattern":"[url:value = 'http://210.208.110.130:40967/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--313d10a2-2f83-449a-0f0f-00003c2092d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.129.144.219:54088/i","pattern":"[url:value = 'http://182.129.144.219:54088/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0215cec-fe27-1391-1147-00000ee96ebc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.227.206.54:44703/i","pattern":"[url:value = 'http://42.227.206.54:44703/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--886801a4-f5bf-f0e7-0845-0000707568b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.116.142.166:55362/i","pattern":"[url:value = 'http://119.116.142.166:55362/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51504dbb-7a23-a56b-31dc-000013c134b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.91.33:35795/bin.sh","pattern":"[url:value = 'http://110.36.91.33:35795/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8d45077-e677-0aa7-4ca0-00009ecd703a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.239.253:51695/i","pattern":"[url:value = 'http://110.39.239.253:51695/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41a0ba7e-90a5-ad05-80b9-000062e5e56f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.187.252.24:54389/i","pattern":"[url:value = 'http://60.187.252.24:54389/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fdc50d4-c46a-ae13-c4ee-00004b281b76","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.44.119:37578/i","pattern":"[url:value = 'http://110.37.44.119:37578/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--076bba94-1dbf-6ee2-844c-0000ca26ab67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.237.4.138:60559/i","pattern":"[url:value = 'http://42.237.4.138:60559/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--321b5482-1631-b9e9-8e5a-00004275dbce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.183.3.192:41382/i","pattern":"[url:value = 'http://119.183.3.192:41382/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74705f84-7337-9582-6c3e-00007f6cc621","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.179.125.40:42620/i","pattern":"[url:value = 'http://42.179.125.40:42620/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c69684b-240f-e9aa-b3d9-000011f31ff0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.214.125:39910/i","pattern":"[url:value = 'http://120.84.214.125:39910/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aaf1709f-6f5e-eec0-776a-0000e7bc01b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.52.194.55:43061/i","pattern":"[url:value = 'http://115.52.194.55:43061/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97b78e0c-2994-2bf1-03b9-00000d692fb7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.2.53.55:45559/i","pattern":"[url:value = 'http://116.2.53.55:45559/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25d8dd65-f019-c11c-7005-000006f4adf4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.54.4.193:56949/bin.sh","pattern":"[url:value = 'http://37.54.4.193:56949/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e65571c7-30b3-4816-92f3-00004db32841","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.184.12.198:38434/i","pattern":"[url:value = 'http://119.184.12.198:38434/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f2360b6-abf7-2db0-649f-0000f23fdda6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.53.20.49:42959/i","pattern":"[url:value = 'http://116.53.20.49:42959/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ddbb64c-98c1-ba22-3b87-00002e683325","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.23.133.4:35951/bin.sh","pattern":"[url:value = 'http://183.23.133.4:35951/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37aadb10-1af2-c32d-4577-0000bc9fb0cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.149.40:50481/i","pattern":"[url:value = 'http://115.56.149.40:50481/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb8cdcd8-c4ed-ea40-e822-0000be6f64c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.1.247.58:51510/i","pattern":"[url:value = 'http://221.1.247.58:51510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd0819dc-789e-8e02-b8bf-0000e53ea82d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.35.226:40707/i","pattern":"[url:value = 'http://196.189.35.226:40707/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5648dd17-7438-effb-b4a3-0000a18e82fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.121.20:34150/bin.sh","pattern":"[url:value = 'http://115.49.121.20:34150/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53a4b6dd-4ae4-6e2e-43c7-000012038d51","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.44.119:37578/bin.sh","pattern":"[url:value = 'http://110.37.44.119:37578/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3115c51-e41e-45ee-436d-0000e5b63340","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.73.160:37461/bin.sh","pattern":"[url:value = 'http://42.235.73.160:37461/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--537bf4a0-75d2-cd0c-1ce0-00009a099490","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.94.194.151:60883/bin.sh","pattern":"[url:value = 'http://124.94.194.151:60883/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83ec46d2-21eb-7abe-2021-000075e4e2a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.14.56:52752/bin.sh","pattern":"[url:value = 'http://221.15.14.56:52752/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8a4e335-a248-0acb-26ba-0000723ea5e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.94.94:33716/i","pattern":"[url:value = 'http://42.235.94.94:33716/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0c63b73-a0f8-34d8-ae9f-0000ec741bda","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.22.216:55052/i","pattern":"[url:value = 'http://110.37.22.216:55052/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d4cbaa3-29c6-0fed-4ca1-00004e08ed93","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://83.168.69.141/p1.sh","pattern":"[url:value = 'http://83.168.69.141/p1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17426656-8516-cda1-6e8b-00003732fb26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.230.79.157:47435/bin.sh","pattern":"[url:value = 'http://115.230.79.157:47435/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b42b6e2-3f43-f3b0-98b0-0000745d6869","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://200.115.102.246:32939/i","pattern":"[url:value = 'http://200.115.102.246:32939/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9d0b222-a595-947b-8a88-00009f9fc907","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.105.170:60232/bin.sh","pattern":"[url:value = 'http://196.190.105.170:60232/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1694efb3-19ab-81f9-3bd8-00001deabd8f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.95.26:40959/bin.sh","pattern":"[url:value = 'http://163.142.95.26:40959/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f9d3d72-3bf5-fe5f-4e0a-000047555ef8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.185.91.133:52353/i","pattern":"[url:value = 'http://123.185.91.133:52353/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e5199ff-193e-c04c-d14f-0000f601211c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.240.11.199:57352/i","pattern":"[url:value = 'http://182.240.11.199:57352/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdf8123a-a406-2f0b-07ba-000016182fe8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.239.64.220:36469/i","pattern":"[url:value = 'http://113.239.64.220:36469/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3b8f358-0b7c-c9ed-1160-00006cf2b3b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.213.104:40820/bin.sh","pattern":"[url:value = 'http://182.126.213.104:40820/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9c966e0-edc1-0f29-8ccb-00008c8b23c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.70.226.107:53300/i","pattern":"[url:value = 'http://36.70.226.107:53300/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--626338d9-6eb4-5446-58cb-0000b50ac76a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.197.32.42:36155/i","pattern":"[url:value = 'http://115.197.32.42:36155/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1a5ec21-0b2f-be2d-fc22-0000998e822f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.113.206:54138/bin.sh","pattern":"[url:value = 'http://182.116.113.206:54138/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f91ef35c-35b9-f2eb-ab8d-0000544e1d9e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.58.42.29:40746/bin.sh","pattern":"[url:value = 'http://59.58.42.29:40746/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cdbb74f-a688-f492-aeb3-00003535bc6c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.21.174.229:40485/bin.sh","pattern":"[url:value = 'http://60.21.174.229:40485/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad626489-9e9b-7839-2c64-0000b8bfcbdb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.59.78.61:33716/bin.sh","pattern":"[url:value = 'http://42.59.78.61:33716/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--627e454b-ef59-f232-6fd9-0000b20ac096","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.21.174.229:40485/i","pattern":"[url:value = 'http://60.21.174.229:40485/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1bb9700-17d5-2a8c-f22b-000096c533a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_ppc","pattern":"[url:value = 'http://62.60.249.165/main_ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35ba5237-97b8-3cba-5b5b-0000766bd3ca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.124.43:44400/bin.sh","pattern":"[url:value = 'http://27.215.124.43:44400/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7ef3ba3-0001-51ab-77f4-0000234fb6a1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.124.43:44400/i","pattern":"[url:value = 'http://27.215.124.43:44400/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--159de90d-54ab-d3f6-ccbd-0000fdac71b4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://95.9.35.137:36140/bin.sh","pattern":"[url:value = 'http://95.9.35.137:36140/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a38663ca-8521-5580-9e82-0000224548ea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.254.10:40659/bin.sh","pattern":"[url:value = 'http://59.97.254.10:40659/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eec5c48c-a4f7-e1c3-b3a4-000058c183d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.88.136.194:60655/i","pattern":"[url:value = 'http://36.88.136.194:60655/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beb292cb-56c5-fdec-24da-00000f940689","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.254.10:40659/i","pattern":"[url:value = 'http://59.97.254.10:40659/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc0edcd9-6a48-b360-638e-0000bc1becb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.1.186:40670/bin.sh","pattern":"[url:value = 'http://61.53.1.186:40670/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--753fe9bb-096b-825f-2719-000004a731b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.115.232.200:58187/bin.sh","pattern":"[url:value = 'http://182.115.232.200:58187/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--380904f4-4eca-24f4-5922-00005b0be33a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.1.186:40670/i","pattern":"[url:value = 'http://61.53.1.186:40670/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--def3113b-8d08-8ed3-8189-0000ab25cfb7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.72.21:54289/i","pattern":"[url:value = 'http://105.184.72.21:54289/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ac5b9f1-c775-cb44-f733-00009e797f0d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.132.156.143:47860/i","pattern":"[url:value = 'http://123.132.156.143:47860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9869c966-cf3d-2f2e-d28f-0000967a475f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.115.232.200:58187/i","pattern":"[url:value = 'http://182.115.232.200:58187/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ae2b543-8792-f113-f64e-0000511cafa4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://98.36.141.73:43074/bin.sh","pattern":"[url:value = 'http://98.36.141.73:43074/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92a1e913-d259-884d-e125-0000c47b83ce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.187.252.24:54389/bin.sh","pattern":"[url:value = 'http://60.187.252.24:54389/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80e07aaa-b067-5211-5474-00005543ee9c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://98.36.141.73:43074/i","pattern":"[url:value = 'http://98.36.141.73:43074/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--344d7c0c-67f7-22c4-5d40-0000768bb729","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.228.213:55432/bin.sh","pattern":"[url:value = 'http://115.57.228.213:55432/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7082afca-8d02-8253-7aaf-000042671462","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.222.21:33146/i","pattern":"[url:value = 'http://222.142.222.21:33146/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9144358a-c8a8-ee9b-2827-0000cb549c56","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.131.145:41328/bin.sh","pattern":"[url:value = 'http://182.117.131.145:41328/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ed7bb65-b49d-ba95-fbef-0000a5ec7c1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.228.213:55432/i","pattern":"[url:value = 'http://115.57.228.213:55432/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5257267-6af5-f1a4-7067-0000efe3579d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.131.145:41328/i","pattern":"[url:value = 'http://182.117.131.145:41328/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--385e945f-de3b-4fa2-1ccf-00000a681ff6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.30.230:43216/bin.sh","pattern":"[url:value = 'http://182.117.30.230:43216/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9594d047-f0bf-2e44-0468-0000f7f94c3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.1.200:60120/bin.sh","pattern":"[url:value = 'http://110.36.1.200:60120/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80d65fa4-2db6-35fb-62a3-0000789486e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.10.187:42654/i","pattern":"[url:value = 'http://115.55.10.187:42654/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44537ca1-f3c2-642f-03a6-00005d244409","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_64858a8342cb3c62.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_64858a8342cb3c62.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--131d8f9f-52b4-45d0-f239-0000dd24522d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_cb2aa48501d6d3b6.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_cb2aa48501d6d3b6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f581d065-5167-c659-223c-0000a1ed3a39","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_776621fa56cb2ef8.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_776621fa56cb2ef8.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b1c4f5c-601a-5068-56d3-0000f2309dd4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.0.112.226:51471/Mozi.a","pattern":"[url:value = 'http://218.0.112.226:51471/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--528c4962-7e73-2888-c74e-00007a9061f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_48852a33f51921f1.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_48852a33f51921f1.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--856c2f59-17e0-2d10-3069-0000c103450a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.77.246.150/loader.sh","pattern":"[url:value = 'http://103.77.246.150/loader.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d01f4bbd-897c-c35c-4efc-0000a775b306","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://192.162.199.149/uploads/d6a0dbb9ae834113a8401012b1f9aa18.exe","pattern":"[url:value = 'http://192.162.199.149/uploads/d6a0dbb9ae834113a8401012b1f9aa18.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3589e251-e339-bbb1-1136-00006124abf6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://www.krypton-client.net/assets/krypton-free.jar","pattern":"[url:value = 'https://www.krypton-client.net/assets/krypton-free.jar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3da7160-f89a-ed86-dd66-0000ec83fd20","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://kryptonclientliista.lovable.app/__l5e/assets-v1/a2ff2b05-f09a-413d-96b1-14a028790953/KryptonPlus-LIISTA.jar","pattern":"[url:value = 'https://kryptonclientliista.lovable.app/__l5e/assets-v1/a2ff2b05-f09a-413d-96b1-14a028790953/KryptonPlus-LIISTA.jar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae0307c5-f441-79bd-4268-0000b55ad6d6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_f5ae52914bf7056f.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_f5ae52914bf7056f.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d6634c1-c416-9090-5210-00007be08e3e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://111.127.232.94:58633/Mozi.m","pattern":"[url:value = 'http://111.127.232.94:58633/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--914319d2-e5b6-0e74-3070-00000eae1d53","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.143.37:55447/Mozi.a","pattern":"[url:value = 'http://105.186.143.37:55447/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6024f026-7374-1f15-b0c6-0000e0097af0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_76fd7c41ddb193a5.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_76fd7c41ddb193a5.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6335dc6b-1752-9ce5-89fe-0000cbca2f3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/cat.sh","pattern":"[url:value = 'http://77.239.124.108/cat.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7ec555e-607e-8899-1ac3-0000fc244181","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_14cf0ee8101600e7.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_14cf0ee8101600e7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47cdca74-173c-c480-00a7-0000734e04ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.5.157:44447/bin.sh","pattern":"[url:value = 'http://110.37.5.157:44447/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8357a5bb-7a72-d009-fa84-00001b02d827","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.30.151:34327/i","pattern":"[url:value = 'http://115.49.30.151:34327/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8c41ca4-ce47-d43f-f6ec-00005079eb2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.243.71:34099/bin.sh","pattern":"[url:value = 'http://219.157.243.71:34099/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b60d056c-460a-db3a-3b04-0000b67dffa4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.5.157:44447/i","pattern":"[url:value = 'http://110.37.5.157:44447/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bf65246-5741-557a-6fe7-00005c32dc38","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.30.230:43216/i","pattern":"[url:value = 'http://182.117.30.230:43216/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c02b7e1a-f780-6dcb-354d-0000f8c7cef0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.243.71:34099/i","pattern":"[url:value = 'http://219.157.243.71:34099/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73e5211e-1848-fa82-919a-0000be31c8b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.224.62:47591/bin.sh","pattern":"[url:value = 'http://196.190.224.62:47591/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7836a55c-8bec-9b71-a1d1-00008d1a4f37","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.72.182:41495/bin.sh","pattern":"[url:value = 'http://110.36.72.182:41495/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29f4fbb6-9c11-ca0e-403b-0000783dc956","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.138.90:37638/bin.sh","pattern":"[url:value = 'http://59.96.138.90:37638/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f2dc968-9563-81b7-3015-0000ed55ef0b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.224.62:47591/i","pattern":"[url:value = 'http://196.190.224.62:47591/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cb15362-7368-4fe8-6759-000092d5d751","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/gfg.sh","pattern":"[url:value = 'http://62.60.249.165/gfg.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1c25923-a2fe-7620-14e3-0000d06ef867","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_arm5","pattern":"[url:value = 'http://62.60.249.165/main_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87981665-135f-5b8c-cde8-00005826e243","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_m68k","pattern":"[url:value = 'http://62.60.249.165/main_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9d18427-0364-6913-ceb3-0000674faa7f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/scanner","pattern":"[url:value = 'http://62.60.249.165/scanner']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fcc380f-8a37-54e8-e88e-00007a6730ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_arm7","pattern":"[url:value = 'http://62.60.249.165/main_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68cb0899-6589-0b7c-b2f8-0000c2db5789","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_arm6","pattern":"[url:value = 'http://62.60.249.165/main_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a768d01-5fac-00bf-bdc1-0000c2ff1dcc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/pandora.x86_64","pattern":"[url:value = 'http://2.26.81.46/pandora.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7a1d836-5620-ea56-1814-00003ca00032","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.179.192:41888/i","pattern":"[url:value = 'http://42.239.179.192:41888/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2688cff4-212a-7367-a391-0000e9ba5e17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.138.90:37638/i","pattern":"[url:value = 'http://59.96.138.90:37638/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fae566d-7c75-b71e-345d-000069f6699f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.127.19:51010/i","pattern":"[url:value = 'http://115.49.127.19:51010/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1800d4d-5e7c-6c27-04e7-0000d422a681","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.186.227:47974/i","pattern":"[url:value = 'http://42.231.186.227:47974/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71dd9e16-6734-da46-0382-0000fb7d93e0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://200.115.102.2:47663/bin.sh","pattern":"[url:value = 'http://200.115.102.2:47663/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f547103e-7115-42a3-a9bc-000078f94ba3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.64.24:42706/bin.sh","pattern":"[url:value = 'http://125.45.64.24:42706/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--063db189-a480-6795-4cc8-0000bf24b64f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.64.24:42706/i","pattern":"[url:value = 'http://125.45.64.24:42706/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d2f28fc-88d8-6f44-370b-0000be245cc4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.101.188:34800/bin.sh","pattern":"[url:value = 'http://115.50.101.188:34800/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84a70ea3-1579-a0c7-9f65-0000f979bdd6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.221.8.44:56847/i","pattern":"[url:value = 'http://113.221.8.44:56847/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4baece3-832b-bc73-98a8-000086adcdd1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.110.49.243:54807/bin.sh","pattern":"[url:value = 'http://125.110.49.243:54807/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b22cc01a-d04f-a76d-f858-00001ce5d817","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.101.188:34800/i","pattern":"[url:value = 'http://115.50.101.188:34800/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7c8adc0-0841-3ee2-7475-0000ebcf5b7f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.110.49.243:54807/i","pattern":"[url:value = 'http://125.110.49.243:54807/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cfcf94c-7da5-77cc-180f-0000fc83d585","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://1.58.182.84:51623/i","pattern":"[url:value = 'http://1.58.182.84:51623/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ae7f9a0-7c6f-5548-64c4-0000d61e356b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.82.149:47697/bin.sh","pattern":"[url:value = 'http://182.121.82.149:47697/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92dbdab0-bfd0-08c8-9e6e-00005bfe9de5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.51.38.188:51859/bin.sh","pattern":"[url:value = 'http://115.51.38.188:51859/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--496383ad-cfe6-74f2-90f9-0000e1c370be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.82.149:47697/i","pattern":"[url:value = 'http://182.121.82.149:47697/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18f18da8-fcfa-2513-21f4-0000678a6de2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.231.159:45731/bin.sh","pattern":"[url:value = 'http://182.121.231.159:45731/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24e2ec56-6aab-730c-0c4b-00002088283c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://46.159.139.237:45921/bin.sh","pattern":"[url:value = 'http://46.159.139.237:45921/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29605262-4d4d-4e64-72a5-00007a1a0447","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.231.159:45731/i","pattern":"[url:value = 'http://182.121.231.159:45731/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffb91add-7c69-2fa7-3bc4-000073b712c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.174.66.196:56771/i","pattern":"[url:value = 'http://175.174.66.196:56771/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b249ff0-4ac4-e83f-387a-00008b684471","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://156.146.24.110:48908/bin.sh","pattern":"[url:value = 'http://156.146.24.110:48908/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea65ea02-1174-3817-8810-00006ebb1f9b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.90.150.62:51319/bin.sh","pattern":"[url:value = 'http://39.90.150.62:51319/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cd1722e-2646-ef47-af6f-00002a78d76e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.118.104:55662/bin.sh","pattern":"[url:value = 'http://182.116.118.104:55662/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--833ab1b6-ba02-616e-750f-00000e7781c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.10.155.173:55027/bin.sh","pattern":"[url:value = 'http://123.10.155.173:55027/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64fba365-a5c8-fd0f-7f35-0000152f88bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.68.239:58818/bin.sh","pattern":"[url:value = 'http://196.189.68.239:58818/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c898fc30-df15-70ab-f504-000096c01531","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://156.146.24.110:48908/i","pattern":"[url:value = 'http://156.146.24.110:48908/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--672f6326-280e-759f-296a-00002db77aa6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.223.172:43584/i","pattern":"[url:value = 'http://110.38.223.172:43584/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89987a17-d63d-9ea8-e912-0000c61b7ad8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.61.166:60696/bin.sh","pattern":"[url:value = 'http://110.37.61.166:60696/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d354151b-d224-1ad8-ae77-0000bfb67a15","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.124.119.64:56849/bin.sh","pattern":"[url:value = 'http://182.124.119.64:56849/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e8c1a06-724b-caef-d20f-0000a4d80c92","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.90.150.62:51319/i","pattern":"[url:value = 'http://39.90.150.62:51319/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4647bad1-12c6-d502-ab67-00008eaf88ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.10.155.173:55027/i","pattern":"[url:value = 'http://123.10.155.173:55027/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc24cc34-9e86-919b-7f44-00008c5874cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.61.166:60696/i","pattern":"[url:value = 'http://110.37.61.166:60696/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75688d70-c67e-9a1c-ec6d-00006dc322e7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.68.239:58818/i","pattern":"[url:value = 'http://196.189.68.239:58818/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4824a684-efc5-ce19-aa2b-0000d6140904","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.40.110:37931/i","pattern":"[url:value = 'http://221.14.40.110:37931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba7d5d86-c629-94f4-f685-0000306f0cbe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.124.119.64:56849/i","pattern":"[url:value = 'http://182.124.119.64:56849/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c39af0e-abe7-7602-d646-000088724006","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.127.53.189:49946/bin.sh","pattern":"[url:value = 'http://222.127.53.189:49946/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fef49df-de82-1936-6d19-000063ad3c89","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.122.70:48495/bin.sh","pattern":"[url:value = 'http://125.40.122.70:48495/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b54e351f-7afc-8e08-e1c0-0000d0590f77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.116.88.117:40271/bin.sh","pattern":"[url:value = 'http://119.116.88.117:40271/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d91e4219-7804-743b-9dfe-0000dfc1cd6c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.127.53.189:49946/i","pattern":"[url:value = 'http://222.127.53.189:49946/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad87e6d7-0519-d9f5-74eb-00000748245f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.186.231.247:53078/i","pattern":"[url:value = 'http://110.186.231.247:53078/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e164047-9b0a-962a-862c-0000850e24f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.124.137:52075/i","pattern":"[url:value = 'http://61.53.124.137:52075/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7eb9ff2-e013-9b33-d40e-000083374ff2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.146.231.101:47081/i","pattern":"[url:value = 'http://175.146.231.101:47081/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a61fc4fc-8a5f-aa93-59ed-00006a36d003","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.38.162:51120/i","pattern":"[url:value = 'http://222.139.38.162:51120/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98f0f8cc-e6cb-ee47-ab3c-00000d1bb3bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.203.149:37425/i","pattern":"[url:value = 'http://115.63.203.149:37425/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63abdbbb-6cfc-7016-5178-00001eb53288","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/7782139129/Tz2SZvL.exe","pattern":"[url:value = 'http://62.60.226.140/files/7782139129/Tz2SZvL.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c636e713-35aa-bbdc-7486-00003493a8f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.159.154.179:36339/i","pattern":"[url:value = 'http://27.159.154.179:36339/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aefbfad-467e-31a9-57bb-0000763ec679","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.24.217.164:45145/bin.sh","pattern":"[url:value = 'http://117.24.217.164:45145/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6674e6a7-2930-a989-2bab-0000770def62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.228.4.224:58279/i","pattern":"[url:value = 'http://112.228.4.224:58279/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47b99314-fff1-98b2-d248-000007889cb4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.150.155:55809/bin.sh","pattern":"[url:value = 'http://222.138.150.155:55809/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e72345d8-7360-3fb6-a91e-00005885ebf3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://108.170.136.155:37224/bin.sh","pattern":"[url:value = 'http://108.170.136.155:37224/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b6e3aad-f266-c5dc-d66a-0000aa7519e0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.78.26.151:57370/i","pattern":"[url:value = 'http://39.78.26.151:57370/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c864874-5bf5-8935-acb0-00009bf566b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.152.98:57265/bin.sh","pattern":"[url:value = 'http://42.239.152.98:57265/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aceedf8e-85e7-d86c-d304-00005ecf6527","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.150.155:55809/i","pattern":"[url:value = 'http://222.138.150.155:55809/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--468bfc83-a431-7688-d53a-0000d5661428","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://108.170.136.155:37224/i","pattern":"[url:value = 'http://108.170.136.155:37224/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20a00a2d-30a0-fe35-8d8d-0000e8dadb5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.152.98:57265/i","pattern":"[url:value = 'http://42.239.152.98:57265/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7da6ba8-14f6-779d-c106-0000c312c017","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.228.4.224:58279/bin.sh","pattern":"[url:value = 'http://112.228.4.224:58279/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f5e30f3-caf5-5175-b877-00001061c278","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.13.24:36195/i","pattern":"[url:value = 'http://182.112.13.24:36195/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fc62cef-c386-bad8-0987-00001dfede47","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.249.15:59820/bin.sh","pattern":"[url:value = 'http://59.97.249.15:59820/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b52e8c4-61f1-674a-42ad-000071123215","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.249.15:59820/i","pattern":"[url:value = 'http://59.97.249.15:59820/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5813af9-ba2a-8d6f-4583-0000f17560cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.179.238.52:48748/bin.sh","pattern":"[url:value = 'http://42.179.238.52:48748/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1930b0e-20d3-7d78-011b-0000741a7350","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://72.255.30.244:42024/bin.sh","pattern":"[url:value = 'http://72.255.30.244:42024/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a625143-d2e4-ffe9-efee-000086b61a7c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.133.101.151:58126/bin.sh","pattern":"[url:value = 'http://123.133.101.151:58126/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6df3ab0e-cb37-3b94-dd65-000097afae4d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/dp.sh","pattern":"[url:value = 'http://191.44.112.89:889/dp.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2929244-9afc-7818-135b-0000de937ae0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.x86","pattern":"[url:value = 'http://191.44.112.89:889/pito.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1336063e-f5c0-ecaa-338f-00004363bf38","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.ppc440","pattern":"[url:value = 'http://191.44.112.89:889/pito.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c687d3b9-4c27-8a35-3416-0000e73000a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.mips","pattern":"[url:value = 'http://191.44.112.89:889/pito.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65f8f993-e5d4-e1a6-4e5e-00007d3b63b8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.arm6","pattern":"[url:value = 'http://191.44.112.89:889/pito.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcf1a829-53fe-e570-89cb-00006f8ecc56","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.arm5","pattern":"[url:value = 'http://191.44.112.89:889/pito.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa7241dd-98fc-a041-60b4-0000264e8d63","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.sh4","pattern":"[url:value = 'http://191.44.112.89:889/pito.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1397891f-619e-2514-7e6f-000067268415","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.i486","pattern":"[url:value = 'http://191.44.112.89:889/pito.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12ffc905-0f06-24a4-f2ec-0000c58704dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.arm7","pattern":"[url:value = 'http://191.44.112.89:889/pito.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bf698bf-85d3-875e-6a11-0000d732ab33","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.arm4","pattern":"[url:value = 'http://191.44.112.89:889/pito.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--378af076-fc99-0090-a90c-0000bddbdaf8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.mipsel","pattern":"[url:value = 'http://191.44.112.89:889/pito.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f20a38a-3a5c-e33e-50fc-0000a6901495","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.ppc","pattern":"[url:value = 'http://191.44.112.89:889/pito.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d21fdee6-0b23-5ab9-38d4-0000cbaa0c0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.x64","pattern":"[url:value = 'http://191.44.112.89:889/pito.x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10135d71-af1c-f84f-9d3b-00002aee251e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.i686","pattern":"[url:value = 'http://191.44.112.89:889/pito.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aabe76f-7d3e-4ee5-1f60-0000e7c6d672","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.m68k","pattern":"[url:value = 'http://191.44.112.89:889/pito.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42fc9a64-47d1-da54-a710-0000840dfab7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.sparc","pattern":"[url:value = 'http://191.44.112.89:889/pito.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b5ab6bb-17a8-6eed-f428-0000045ce5b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.188.204.211:12907/bin.sh","pattern":"[url:value = 'http://183.188.204.211:12907/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d9fe53e-5fe7-9688-0e95-0000993a0475","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.179.238.52:48748/i","pattern":"[url:value = 'http://42.179.238.52:48748/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--221248f2-8a00-0f7b-d617-0000892f5677","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://thu-iphone-07.cfd/JutrvoService.exe","pattern":"[url:value = 'https://thu-iphone-07.cfd/JutrvoService.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e45969ca-6725-3737-1e0a-0000cec66f62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.133.101.151:58126/i","pattern":"[url:value = 'http://123.133.101.151:58126/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69231027-9af9-f77c-b1c7-000021d17681","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.188.204.211:12907/i","pattern":"[url:value = 'http://183.188.204.211:12907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f588313-2017-7db8-3213-00009f084a96","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.100.231:50864/bin.sh","pattern":"[url:value = 'http://27.37.100.231:50864/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40e8e993-9994-694a-af31-00002a4e61a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.114.89:40814/bin.sh","pattern":"[url:value = 'http://115.55.114.89:40814/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d59f910-f45c-ea27-4e8b-00003f995547","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.86.83:54748/i","pattern":"[url:value = 'http://110.36.86.83:54748/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37ace7db-5284-cf7a-6c17-0000bbf515a0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.142.30:42974/i","pattern":"[url:value = 'http://59.96.142.30:42974/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3339e01e-5bd6-d7be-ab7e-0000e3b5b003","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.114.89:40814/i","pattern":"[url:value = 'http://115.55.114.89:40814/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d235a3db-9cd2-89b9-b5c3-0000a633b4a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.248.123.33:49271/bin.sh","pattern":"[url:value = 'http://116.248.123.33:49271/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--faca328f-2eed-ca10-b3d9-000088de6636","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.242.56.104:47860/i","pattern":"[url:value = 'http://112.242.56.104:47860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--360bbd8f-176c-9482-9110-0000d8a61058","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.131.148.213:44472/bin.sh","pattern":"[url:value = 'http://124.131.148.213:44472/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7739dac5-6fcd-b8ec-2b4a-000047c0b4ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.116.88.117:40271/i","pattern":"[url:value = 'http://119.116.88.117:40271/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61767ce7-a58d-c7dc-c3bc-000062376119","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.248.160:54570/bin.sh","pattern":"[url:value = 'http://42.224.248.160:54570/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70aaf821-98e3-ab7c-10c1-0000279f484a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.248.123.33:49271/i","pattern":"[url:value = 'http://116.248.123.33:49271/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50c6080a-f679-7c69-5120-0000433f2da5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.131.148.213:44472/i","pattern":"[url:value = 'http://124.131.148.213:44472/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f63f8a4-5703-4351-4861-000022d9eb0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.19.202:54735/i","pattern":"[url:value = 'http://222.137.19.202:54735/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--855efb82-01eb-9689-70ba-00006d5cce40","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.239.201:47209/i","pattern":"[url:value = 'http://123.12.239.201:47209/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d6037b1-7ed1-2be7-a5e3-0000ed5f10f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.248.160:54570/i","pattern":"[url:value = 'http://42.224.248.160:54570/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60370ee7-ff46-8fc0-f69b-00007ee50b6a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.188.2:43535/bin.sh","pattern":"[url:value = 'http://42.239.188.2:43535/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56104ee3-9f63-2395-ef91-00002c9f59ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.52.190.59:42242/i","pattern":"[url:value = 'http://115.52.190.59:42242/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d3d4bf1-a63b-eb4e-4eca-00000b9586bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.193.5:33801/bin.sh","pattern":"[url:value = 'http://112.198.193.5:33801/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6321193-8032-7c36-1ce3-0000902d3171","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://77.83.39.66/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://77.83.39.66/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aad4faec-48e5-f163-1bee-00003b63733a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.83.39.9/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://77.83.39.9/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5cca54e-8798-c82e-cc88-0000cfd02396","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.83.39.9/bin/support.client.exe","pattern":"[url:value = 'http://77.83.39.9/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f702dc6-3d72-26b4-7865-0000117b84e0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.241.142/bin/support.client.exe","pattern":"[url:value = 'http://217.60.241.142/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07f9af0e-0388-9eb4-907b-00001316823d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.241.142/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://217.60.241.142/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9611308f-00cb-5d17-85fa-0000abe90f84","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.241.248/bin/support.client.exe","pattern":"[url:value = 'http://217.60.241.248/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d39018ba-87e5-cd7d-40e5-00004eab35a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.241.248/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://217.60.241.248/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--155b2292-9c00-2f83-afdd-000051eae779","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.188.2:43535/i","pattern":"[url:value = 'http://42.239.188.2:43535/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--319e3f42-11bf-80fc-1cea-0000c801884e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.193.5:33801/i","pattern":"[url:value = 'http://112.198.193.5:33801/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b17770e1-591d-36a7-2a4f-0000bd0862e1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.118.246.94:39103/i","pattern":"[url:value = 'http://182.118.246.94:39103/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--543701ab-b23e-6f25-364b-000080fd6335","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.239.122.112:54204/bin.sh","pattern":"[url:value = 'http://112.239.122.112:54204/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbb3e9c8-1049-3ffe-7b38-0000b61e283e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.43.152:53485/i","pattern":"[url:value = 'http://182.113.43.152:53485/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e60e58e-59cc-de9b-5cb9-00007166159b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.182.37:37037/bin.sh","pattern":"[url:value = 'http://222.138.182.37:37037/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26ac8c76-eef5-534a-912d-0000ec5c69ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.239.122.112:54204/i","pattern":"[url:value = 'http://112.239.122.112:54204/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6159c63-e92a-8f3e-c9cd-00000ece118c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.32.238/s.ps1","pattern":"[url:value = 'http://94.154.32.238/s.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7dc707b-ddda-c34a-3f5b-00000c8825d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online/asset/update.dat","pattern":"[url:value = 'http://newstan.online/asset/update.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df6847d0-ff82-e587-5fd7-000085ae40e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://171.213.150.35:35745/i","pattern":"[url:value = 'http://171.213.150.35:35745/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a7820b6-f181-943d-e375-0000feff1aea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.255.161:44359/i","pattern":"[url:value = 'http://182.114.255.161:44359/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44a101cc-934c-1a02-77ca-0000d40988f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.182.37:37037/i","pattern":"[url:value = 'http://222.138.182.37:37037/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd86a203-3054-6cb3-7ac0-00006eda0374","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.202.206.125:41411/bin.sh","pattern":"[url:value = 'http://221.202.206.125:41411/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f1922b7-6078-5cd0-8adc-0000f7be43e4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.130.218:47315/bin.sh","pattern":"[url:value = 'http://115.55.130.218:47315/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dae89c3-44c9-cdb3-a053-0000bcb0c0c7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://114.227.49.3:38196/bin.sh","pattern":"[url:value = 'http://114.227.49.3:38196/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec032b81-8a87-6577-2360-0000fbf89826","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://114.227.49.3:38196/i","pattern":"[url:value = 'http://114.227.49.3:38196/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17f99478-11c2-ea06-8ff6-00007fd879f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.181.178:58549/bin.sh","pattern":"[url:value = 'http://125.44.181.178:58549/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35528b31-95e4-55bd-b67f-00008ccdbb64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.202.206.125:41411/i","pattern":"[url:value = 'http://221.202.206.125:41411/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--782d68e4-fa8a-e3f0-a7b2-0000b2668070","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://218.91.14.121:32924/bin.sh","pattern":"[url:value = 'http://218.91.14.121:32924/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb0b0b44-7d32-98e4-691f-0000f7c3600a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.181.178:58549/i","pattern":"[url:value = 'http://125.44.181.178:58549/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f36b7b9d-3f33-8592-b76a-000017167613","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://218.91.14.121:32924/i","pattern":"[url:value = 'http://218.91.14.121:32924/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ccbc1a2-ee48-02c7-da90-0000f0dd319b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.140.186.83:34139/i","pattern":"[url:value = 'http://116.140.186.83:34139/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--366ff72c-b5d4-2efa-4344-000043d1f1af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.59.204.16:37885/i","pattern":"[url:value = 'http://42.59.204.16:37885/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d81cc137-ff28-3e90-af24-000013b20c23","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.165.184.118:41931/i","pattern":"[url:value = 'http://119.165.184.118:41931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60848353-dcb2-e427-2e1c-000060f75996","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.214.127:40959/i","pattern":"[url:value = 'http://120.84.214.127:40959/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4322f164-15a2-1538-3a35-0000636fb709","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.188.223.103:33612/bin.sh","pattern":"[url:value = 'http://123.188.223.103:33612/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--184b38eb-4cf5-7a04-1c33-0000a7505e14","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.107.209.223:44599/bin.sh","pattern":"[url:value = 'http://175.107.209.223:44599/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15f4cac8-567b-99a0-9a4d-0000e00f8b82","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.29.28.21:33666/bin.sh","pattern":"[url:value = 'http://218.29.28.21:33666/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6481f14-2a13-571f-4040-00005a048998","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.25.33:32877/i","pattern":"[url:value = 'http://110.36.25.33:32877/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49b327f6-6ff8-bf64-0fdb-0000cd921ad6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.69.87:33578/bin.sh","pattern":"[url:value = 'http://222.139.69.87:33578/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8aab24c-34ba-35dd-8279-00006d06b76e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.65.22:32872/i","pattern":"[url:value = 'http://125.42.65.22:32872/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7fd3c57-89af-bf9f-1693-00002d7a8a02","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payload/18cb7a9ae6f1d608.bin","pattern":"[url:value = 'http://newstan.online:8443/payload/18cb7a9ae6f1d608.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0851d22-00a1-3d85-5015-0000ad01cc33","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payload/18cb7ca62cfb04e6.bin","pattern":"[url:value = 'http://newstan.online:8443/payload/18cb7ca62cfb04e6.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d47a7b4e-91bd-f708-3bc7-0000f269ddaf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payload.exe","pattern":"[url:value = 'http://newstan.online:8443/payload.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa8816d7-2021-1f6e-c538-0000834bd874","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4ba64c9fd789.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4ba64c9fd789.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1db98da-65b4-1033-93ca-0000dcf1fef7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4bd89774939d.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4bd89774939d.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e308c965-8ee2-1068-157b-0000ae89a8b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4b870df50ce6.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4b870df50ce6.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2140a958-c721-bf83-6b4f-00009fc07cb7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/crypter_server_linux.exe","pattern":"[url:value = 'http://newstan.online:8443/crypter_server_linux.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8ef1ce9-d6cf-680b-7427-000084870ccd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/crypter_server_linux","pattern":"[url:value = 'http://newstan.online:8443/crypter_server_linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db7d9cbf-4ac0-45c6-d665-0000c93434cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb7182b6e8e7b6.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb7182b6e8e7b6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cae4ae7e-4c29-2bdc-8cb4-00003dfab738","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb9cea2d96337e.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb9cea2d96337e.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4928868d-4e93-a71a-b7b5-000045f75a03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb7333cef1df5b.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb7333cef1df5b.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6872fe71-19a3-7625-d171-000095719b82","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb7296bb21486f.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb7296bb21486f.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cda619a0-5051-4012-3026-000089bbb7c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb7441f57b1a78.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb7441f57b1a78.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e3fd13f-17f2-d3a4-2635-0000f5043e4e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb9c2f86cabdb2.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb9c2f86cabdb2.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db0c3a24-c385-4e86-7ffa-0000e72d391b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb7a9ae6f1d608.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb7a9ae6f1d608.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35e8ca8e-58bc-121f-d8cd-00008019269f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb73a84c0c2684.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb73a84c0c2684.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6b7de9d-e0a7-11f2-891d-00004b03a075","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb7296bb21486f.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb7296bb21486f.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd25f24f-6fdb-9196-bc56-0000e23ed8f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4cef6566cc70.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4cef6566cc70.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc741b51-1042-b88f-0238-000067567f2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb7ca62cfb04e6.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb7ca62cfb04e6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71c4ed10-c456-3fa2-d262-00009f896da7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4ccfb9e27fc2.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4ccfb9e27fc2.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80faf1d3-0ec1-71f1-4d9b-00002b7605b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb9c2f86cabdb2.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb9c2f86cabdb2.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b2dea62-631f-d76e-cd0b-00005e6b1d68","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb73a84c0c2684.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb73a84c0c2684.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75b8bc53-e813-154c-a06d-000017460f38","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb7182b6e8e7b6.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb7182b6e8e7b6.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d615a80d-d49b-3b23-dff7-0000f7ad0421","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payload/18cb9cea2d96337e.bin","pattern":"[url:value = 'http://newstan.online:8443/payload/18cb9cea2d96337e.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b2ad36a-a3d8-7b73-0a76-0000c0985409","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4d062cca7589.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4d062cca7589.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6363394c-92ff-f6b4-c0f6-000057c98c31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb7441f57b1a78.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb7441f57b1a78.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfa49ecc-e777-3a19-85fd-000052baea50","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4d3ad86bac08.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4d3ad86bac08.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7eda661-af5d-3779-4a29-00009b8561f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb7333cef1df5b.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb7333cef1df5b.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f07db468-13bc-9010-3492-00001cafb9fb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb72c503457787.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb72c503457787.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eb89484-84cb-0dcb-6016-0000c2dd820c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb72c503457787.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb72c503457787.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26bd20b8-0aa0-e69a-e014-00001f6f01b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.107.209.223:44599/i","pattern":"[url:value = 'http://175.107.209.223:44599/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71f7387e-2061-ac7b-170f-00009e5fdbc1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4cb2cb097b20.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4cb2cb097b20.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76d98c1e-c729-e3ff-f2a7-00008af77695","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.29.28.21:33666/i","pattern":"[url:value = 'http://218.29.28.21:33666/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dea00095-58e0-f067-8c27-0000d9789c83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.69.87:33578/i","pattern":"[url:value = 'http://222.139.69.87:33578/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eab563e-9d12-ad74-c4dd-000077660d08","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://217.60.241.32/bin/support.client.exe","pattern":"[url:value = 'https://217.60.241.32/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e378ad53-41ad-402b-17f3-0000dffbee0e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://217.60.241.32/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://217.60.241.32/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7441fd07-930b-8fab-4f86-000051f0bda9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.221.37.245:40790/i","pattern":"[url:value = 'http://113.221.37.245:40790/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec9cb079-92ba-2fcb-e733-0000b22a674a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://httpbin.org/base64/MDUzOTIxNDY2MDVjMTM4NDU5NTA1OWRjYzBjMWJjZDQyNzc0ODAwZmUzZTRkOGI4MWRmYTE5OTczN2I0NTIwMA==","pattern":"[url:value = 'https://httpbin.org/base64/MDUzOTIxNDY2MDVjMTM4NDU5NTA1OWRjYzBjMWJjZDQyNzc0ODAwZmUzZTRkOGI4MWRmYTE5OTczN2I0NTIwMA==']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfb6d4a5-1622-745b-08da-0000ec93cc38","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.10.7:39430/i","pattern":"[url:value = 'http://123.11.10.7:39430/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f55fef21-6f1e-3e5c-e821-0000efcbcaca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.233.127:51731/i","pattern":"[url:value = 'http://115.57.233.127:51731/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--312341f3-09ed-2d02-ae93-000008f18720","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.23:41753/i","pattern":"[url:value = 'http://46.236.65.23:41753/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb1ca74f-6e74-c6ae-9fdf-00007af7f9f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.237.4.138:60559/bin.sh","pattern":"[url:value = 'http://42.237.4.138:60559/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edb57556-a7b7-d35f-f73f-00007504ddf1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.222.21:33146/bin.sh","pattern":"[url:value = 'http://222.142.222.21:33146/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd20d7b-e766-fcd5-d97c-000071a10f01","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.202.0:42578/i","pattern":"[url:value = 'http://182.113.202.0:42578/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df95a2c3-0b94-ee71-fc93-00007bcbd4c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://83.219.1.198:51018/i","pattern":"[url:value = 'http://83.219.1.198:51018/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72eef1c4-aaec-b92c-ca1a-000028c564c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.52.190.59:42242/bin.sh","pattern":"[url:value = 'http://115.52.190.59:42242/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--887ae7b9-af02-4aa1-4582-00009f167db0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.2.151.15:42459/i","pattern":"[url:value = 'http://203.2.151.15:42459/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcb4da69-3a3d-7b12-a88e-000004abeffd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.194.92:40193/bin.sh","pattern":"[url:value = 'http://120.28.194.92:40193/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46fcd0b9-9bce-2986-a12f-00000bcafb5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.23:41753/bin.sh","pattern":"[url:value = 'http://46.236.65.23:41753/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ddb539e-3d9e-c4bc-f679-0000836cd5a2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.236.74.65:48279/i","pattern":"[url:value = 'http://77.236.74.65:48279/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd4a83bd-f24c-fbc2-e5ea-0000bf574b26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.114.112:54138/i","pattern":"[url:value = 'http://222.138.114.112:54138/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ddb19ef-db36-cc3d-3900-0000dcc9703a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.137.250.247:56159/bin.sh","pattern":"[url:value = 'http://38.137.250.247:56159/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48de9e99-6034-364a-45b1-0000881d9ede","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.87.221.249:38962/i","pattern":"[url:value = 'http://42.87.221.249:38962/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3a9bade-841f-e724-8d9c-0000c2410039","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.179.240.227:36804/i","pattern":"[url:value = 'http://103.179.240.227:36804/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--649b3a2e-568e-f242-c6b9-000084d1ba95","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.80.57.126:60997/i","pattern":"[url:value = 'http://103.80.57.126:60997/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc3c7a1e-d229-043f-3512-000018712693","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.163:51558/i","pattern":"[url:value = 'http://46.236.65.163:51558/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72494f78-756d-c2f0-c54a-0000d675d6ca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://193.163.187.213:45749/bin.sh","pattern":"[url:value = 'http://193.163.187.213:45749/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e8406fe-8b8a-3549-85d9-0000f7a3fba5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.226.79.142:44907/i","pattern":"[url:value = 'http://42.226.79.142:44907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4ff6878-5289-09d7-086e-00002eb27280","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.73.86:41886/bin.sh","pattern":"[url:value = 'http://115.49.73.86:41886/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f03266d-10d9-08de-6377-0000eeaecf3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.185.199.96:32826/bin.sh","pattern":"[url:value = 'http://222.185.199.96:32826/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf04e17a-ae09-28b5-e717-0000ed18ae23","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.153.69:57210/i","pattern":"[url:value = 'http://123.5.153.69:57210/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--446c759f-0046-f31c-691a-000014751ae7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.124.162.58:48222/i","pattern":"[url:value = 'http://182.124.162.58:48222/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--795c24eb-346a-b960-07e3-0000c2f486ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.150.183:34026/i","pattern":"[url:value = 'http://115.49.150.183:34026/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f9d06dc-41ad-f57f-3f01-0000a801c1ea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.205.176:60240/i","pattern":"[url:value = 'http://61.53.205.176:60240/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16de9fac-5355-b73d-c6b1-0000b3a688ba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.227.44:34974/i","pattern":"[url:value = 'http://110.39.227.44:34974/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89b0ab10-cf23-e1c0-0dfd-00006ec230f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.73.126.17:41462/i","pattern":"[url:value = 'http://39.73.126.17:41462/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd17a434-42f5-df98-ffac-00009eacf405","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.59.237.57:55244/i","pattern":"[url:value = 'http://42.59.237.57:55244/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a917743e-b2ab-bea9-ef19-00001203b4a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.59.235.112:57254/i","pattern":"[url:value = 'http://42.59.235.112:57254/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82744e02-b02a-2f80-4082-0000ce6046ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.114.112:54138/bin.sh","pattern":"[url:value = 'http://222.138.114.112:54138/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65537ac6-eda0-59dc-a5fc-000046e63e0b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.9.103:49699/i","pattern":"[url:value = 'http://221.15.9.103:49699/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--842ceb68-4d68-4083-279b-00003de09976","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.14.231:33994/i","pattern":"[url:value = 'http://61.52.14.231:33994/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50122219-ef7d-309e-8a4c-0000b38aea69","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.14.231:33994/bin.sh","pattern":"[url:value = 'http://61.52.14.231:33994/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08fccc19-4eec-1337-86ac-000034c5fb2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.228.213:50246/i","pattern":"[url:value = 'http://125.41.228.213:50246/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d232fe3f-0354-fb62-d778-000099a97a62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.194.17.30:34226/i","pattern":"[url:value = 'http://115.194.17.30:34226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bda53341-5ed7-3324-d881-0000d7f990b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.109.201.128:44332/i","pattern":"[url:value = 'http://101.109.201.128:44332/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16455950-136c-8e45-e8a7-0000f505380a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://193.163.187.213:45749/i","pattern":"[url:value = 'http://193.163.187.213:45749/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2239da29-19ab-0272-bd7a-0000e7389d7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://83.219.1.198:51018/bin.sh","pattern":"[url:value = 'http://83.219.1.198:51018/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0edfe769-aac4-58b7-adbc-0000b4231f61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.65.22:32872/bin.sh","pattern":"[url:value = 'http://125.42.65.22:32872/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de88f1d8-68b5-2e64-cd09-00009928fa16","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.130.240:49683/i","pattern":"[url:value = 'http://115.55.130.240:49683/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba13dbaf-ed62-9cf2-9ab9-0000c0200243","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.224.108:44908/i","pattern":"[url:value = 'http://115.50.224.108:44908/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4303eef3-1a1a-92e2-632b-00001a0007bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.73.126.17:41462/bin.sh","pattern":"[url:value = 'http://39.73.126.17:41462/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca2c9135-2b7a-eddc-ee47-00008c54b5a7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.236.74.65:48279/bin.sh","pattern":"[url:value = 'http://77.236.74.65:48279/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5638541-7b6a-425e-5300-00001761fe50","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.58.88.232:50270/i","pattern":"[url:value = 'http://115.58.88.232:50270/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c216beb8-9992-1ac7-5096-0000b1a9dca3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.221.8.44:56847/bin.sh","pattern":"[url:value = 'http://113.221.8.44:56847/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4ccd98a-d450-b132-792d-0000dafc2bf1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.219.183:55986/bin.sh","pattern":"[url:value = 'http://175.149.219.183:55986/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--576b0b2b-e0ea-c036-9ddb-0000f9fa8de3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.247.59:53378/i","pattern":"[url:value = 'http://125.41.247.59:53378/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a75001c-03c8-76d1-54ba-0000c1259a23","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.131.128.79:53693/i","pattern":"[url:value = 'http://124.131.128.79:53693/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cac0be52-61a2-ab79-3535-00007a6cfe3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.229.199:49596/i","pattern":"[url:value = 'http://27.37.229.199:49596/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2ed854d-6a79-56f6-d046-0000147ba914","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.161.90.29:49111/bin.sh","pattern":"[url:value = 'http://123.161.90.29:49111/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d062cb40-5caf-c818-d9c5-00000f5ec64f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.84.16:59065/bin.sh","pattern":"[url:value = 'http://27.215.84.16:59065/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0650de63-3ff0-ee4f-e391-0000ca3789b4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.85.169.225:40832/i","pattern":"[url:value = 'http://42.85.169.225:40832/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2795474d-3faf-005e-4501-0000b369e513","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.86.0:40490/bin.sh","pattern":"[url:value = 'http://110.36.86.0:40490/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ded14ef-35cc-90aa-37d5-0000a6dd9bfe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.227.44:34974/bin.sh","pattern":"[url:value = 'http://110.39.227.44:34974/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae20a592-d747-30a7-f22b-0000e2ff41fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.179.240.227:36804/bin.sh","pattern":"[url:value = 'http://103.179.240.227:36804/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dff79ae-165b-e9f4-c62a-0000f46f187b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.185.199.96:32826/i","pattern":"[url:value = 'http://222.185.199.96:32826/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--081645bc-f432-b826-0644-000041e84cc3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.130.218:47315/i","pattern":"[url:value = 'http://115.55.130.218:47315/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95fe57a3-b55d-8a79-bea9-000080b7b28a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.224.108:44908/bin.sh","pattern":"[url:value = 'http://115.50.224.108:44908/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89c9dfa5-8b68-6306-22e5-0000cfdd7968","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.249.199.3:36611/bin.sh","pattern":"[url:value = 'http://103.249.199.3:36611/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ed72677-3d80-4373-41af-00007ea1ff26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.131.128.79:53693/bin.sh","pattern":"[url:value = 'http://124.131.128.79:53693/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73991ded-1911-d766-f35f-000023f341d2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.86.137.34:54189/bin.sh","pattern":"[url:value = 'http://42.86.137.34:54189/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa631fcc-ed6d-3392-3e2a-00007522140c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.73.196:42693/i","pattern":"[url:value = 'http://219.155.73.196:42693/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73acf7e6-5ed4-5eb9-a6c8-0000dd847176","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.174.68.59:47203/Mozi.m","pattern":"[url:value = 'http://175.174.68.59:47203/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87264a75-c671-f9b0-1ea7-00007ed7cde0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.80.57.126:60997/bin.sh","pattern":"[url:value = 'http://103.80.57.126:60997/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5858ab08-f18a-1c3c-f705-0000d226a8aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.84.239:35309/i","pattern":"[url:value = 'http://182.126.84.239:35309/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--531e81a8-1b93-998b-993b-0000fb8add4c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.88.173:35767/bin.sh","pattern":"[url:value = 'http://175.149.88.173:35767/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fc6b441-62d7-709b-0788-00007780ae7f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.192.138:40709/i","pattern":"[url:value = 'http://182.114.192.138:40709/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9c26510-33a8-4254-7f81-000085b0da09","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.102.94:60512/bin.sh","pattern":"[url:value = 'http://27.37.102.94:60512/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fda7ca4-b83a-c6bd-bf2e-0000cf8bbd3d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.102.10:46712/i","pattern":"[url:value = 'http://27.37.102.10:46712/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c5d44ec-a5e0-68ab-2da6-0000d541cb2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.72.175:34884/i","pattern":"[url:value = 'http://123.11.72.175:34884/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7152d3c-4e7d-81ce-5ed6-000094f0e7f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.72.175:34884/bin.sh","pattern":"[url:value = 'http://123.11.72.175:34884/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8625d079-bba5-36b4-fc9e-0000656a07af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.152.55:53457/i","pattern":"[url:value = 'http://222.137.152.55:53457/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d26d5f12-26ca-b993-76ea-0000e5f46e1c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://202.107.0.250:55295/i","pattern":"[url:value = 'http://202.107.0.250:55295/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f9ca26d-d9e0-f4ed-7a69-0000d1f11ca6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.102.10:46712/bin.sh","pattern":"[url:value = 'http://27.37.102.10:46712/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46fe4c21-ebe7-3d8f-5e0e-0000cb30b62d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.247.59:53378/bin.sh","pattern":"[url:value = 'http://125.41.247.59:53378/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ad5d646-803b-f9a2-45c6-0000a1baf074","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.2.151.15:42459/bin.sh","pattern":"[url:value = 'http://203.2.151.15:42459/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edf52c1e-5338-1703-a254-00001628a604","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.80.162:54439/i","pattern":"[url:value = 'http://110.36.80.162:54439/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c4147f6-b1ae-0fc8-5637-0000fbdce224","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.84.239:35309/bin.sh","pattern":"[url:value = 'http://182.126.84.239:35309/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--502afb46-37f7-33ee-e863-0000ac92452c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.134.160.73:39191/i","pattern":"[url:value = 'http://183.134.160.73:39191/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37e56d3b-7cca-1cab-621f-0000dc7b4cf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.171.135:36711/i","pattern":"[url:value = 'http://219.155.171.135:36711/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6052e51-e3ea-c7be-6270-0000e265fc3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.171.135:36711/bin.sh","pattern":"[url:value = 'http://219.155.171.135:36711/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a723511-8b9c-812e-22af-0000f5a85ed5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.174.41.135:59524/bin.sh","pattern":"[url:value = 'http://175.174.41.135:59524/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31410a70-3951-0355-3517-00005bb3b443","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.83.219:37581/bin.sh","pattern":"[url:value = 'http://182.121.83.219:37581/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d74ed1eb-4c8a-fa00-0d93-00005886e2f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.182.97.242:4040/i","pattern":"[url:value = 'http://163.182.97.242:4040/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c926b64-ffb7-af32-4fdc-000023a0662a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.113.196.55:38024/i","pattern":"[url:value = 'http://222.113.196.55:38024/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6c42fd0-849d-3d8b-2df6-0000f7ea4efc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.249.199.3:36611/i","pattern":"[url:value = 'http://103.249.199.3:36611/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b134db11-a3c7-f2b8-dce2-0000aaea6439","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.73.86:41886/i","pattern":"[url:value = 'http://115.49.73.86:41886/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37727a46-1edd-887e-ac2e-0000ebba3587","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.9.165.81:50484/i","pattern":"[url:value = 'http://175.9.165.81:50484/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e307e147-c797-89e2-e74b-000058a28906","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.182.97.242:4040/bin.sh","pattern":"[url:value = 'http://163.182.97.242:4040/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19b3683b-8fc3-28d4-0b5c-000023044c5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.161.90.29:49111/i","pattern":"[url:value = 'http://123.161.90.29:49111/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82d5cb7c-772a-0329-4a17-0000772afcc6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.9.165.81:50484/bin.sh","pattern":"[url:value = 'http://175.9.165.81:50484/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0eedcc3-ea6a-b696-4ad1-00000da0283b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.21.106:38226/bin.sh","pattern":"[url:value = 'http://222.141.21.106:38226/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e1167be-8ee6-608d-961d-00007bba4b68","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.52.194.55:43061/bin.sh","pattern":"[url:value = 'http://115.52.194.55:43061/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90edea43-02c1-fab3-cc9e-0000fc80f304","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.227.200.77:49632/i","pattern":"[url:value = 'http://42.227.200.77:49632/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0335d17-ff65-4a72-69c8-00005ddab2f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.142.124:33142/bin.sh","pattern":"[url:value = 'http://59.96.142.124:33142/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0830bdb6-bd9e-b625-8020-00004217275d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.244.13:44914/bin.sh","pattern":"[url:value = 'http://182.121.244.13:44914/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--993f738f-e5a1-52f8-1622-0000ac6b1e82","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.88.173:35767/i","pattern":"[url:value = 'http://175.149.88.173:35767/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--175fba86-ef59-d82c-cefc-0000f43028dc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.152.55:53457/bin.sh","pattern":"[url:value = 'http://222.137.152.55:53457/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d508a8e4-205c-5af0-45de-0000329883d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.83.219:37581/i","pattern":"[url:value = 'http://182.121.83.219:37581/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8a834a6-981b-8f7e-819b-00004aa4bcf9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.87.221.249:38962/bin.sh","pattern":"[url:value = 'http://42.87.221.249:38962/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0aba516b-c8b8-135e-40fd-000038e057e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.240.11.199:57352/bin.sh","pattern":"[url:value = 'http://182.240.11.199:57352/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e856ab28-23e8-512b-0508-00000dd3c3fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.205.176:60240/bin.sh","pattern":"[url:value = 'http://61.53.205.176:60240/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5987ab48-1a6d-b0c9-d1fb-0000b4d0ea2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.235.207.2:39666/bin.sh","pattern":"[url:value = 'http://124.235.207.2:39666/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f4353af-0f7c-429e-70e3-0000581141d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.109.201.128:44332/bin.sh","pattern":"[url:value = 'http://101.109.201.128:44332/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4697066-5aa0-2852-668f-0000a37d5282","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.85.169.225:40832/bin.sh","pattern":"[url:value = 'http://42.85.169.225:40832/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d817f27-510d-ac47-2759-0000fb6cc379","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.177.28.149:50084/bin.sh","pattern":"[url:value = 'http://203.177.28.149:50084/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f788a748-f2e5-0e9a-57b6-000088dab81d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.174.41.135:59524/i","pattern":"[url:value = 'http://175.174.41.135:59524/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29e3e8a2-5df0-2670-d5dc-0000812e06af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.113.189.94:60395/i","pattern":"[url:value = 'http://125.113.189.94:60395/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d99e1ab-f8b3-67c2-488f-0000efed1e1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.150.183:34026/bin.sh","pattern":"[url:value = 'http://115.49.150.183:34026/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1113298-12b0-09f3-8615-000080b6d894","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.177.28.149:50084/i","pattern":"[url:value = 'http://203.177.28.149:50084/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecd91e9f-c7f5-a40f-d0c2-00002977ef20","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://202.107.0.250:55295/bin.sh","pattern":"[url:value = 'http://202.107.0.250:55295/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e3ce763-a45d-ee8f-03c7-000080b72925","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.179.125.40:42620/bin.sh","pattern":"[url:value = 'http://42.179.125.40:42620/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef82e744-8bc2-b45d-4ffe-0000916ce77a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.68.176:50130/i","pattern":"[url:value = 'http://182.117.68.176:50130/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e971829-b166-5497-838d-00002f9aa651","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.248.252.55:54907/i","pattern":"[url:value = 'http://112.248.252.55:54907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2aa27b96-1bec-fdac-419d-0000f9fbe33f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.218.29:55917/i","pattern":"[url:value = 'http://61.53.218.29:55917/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a20d802-596a-9c1f-db94-0000857dfe85","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.57.190:46376/bin.sh","pattern":"[url:value = 'http://123.14.57.190:46376/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a43f114-4cfc-fcc8-17c2-00000d2b8eae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.57.190:46376/i","pattern":"[url:value = 'http://123.14.57.190:46376/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32d8cd0c-cfd4-e6f8-98d4-00000b304f1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.10.187:42654/bin.sh","pattern":"[url:value = 'http://115.55.10.187:42654/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dae02b62-b893-5874-4184-0000695f452b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.84.16:59065/i","pattern":"[url:value = 'http://27.215.84.16:59065/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cf9624d-db0c-6b1f-ee7c-00001f9e18ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.124.162.58:48222/bin.sh","pattern":"[url:value = 'http://182.124.162.58:48222/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70b804c6-987d-e940-22a2-0000c0825196","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_c4ed5358194cb9dd.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_c4ed5358194cb9dd.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87529139-40d8-edf2-8b64-000032f310b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.228.208.46:56903/i","pattern":"[url:value = 'http://113.228.208.46:56903/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d931bca-c4cd-2ef7-c64c-0000a87e5f31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.19.202:54735/bin.sh","pattern":"[url:value = 'http://222.137.19.202:54735/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97defab5-4267-5704-0de9-0000b8db8f26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/1372270670/GpzbWsi.exe","pattern":"[url:value = 'http://62.60.226.140/files/1372270670/GpzbWsi.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bd298f9-b221-3863-5c27-00009f26be10","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/1.sh","pattern":"[url:value = 'http://198.144.179.82/1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c83683f6-845f-7359-c37d-00009a2b1415","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.30.16:36416/i","pattern":"[url:value = 'http://42.230.30.16:36416/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e5c8747-d2b5-8a96-45b6-000097bccd86","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.146.252:57987/i","pattern":"[url:value = 'http://115.48.146.252:57987/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7df510a4-267e-5b00-6465-0000ad12a4ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.124.9.99:47755/bin.sh","pattern":"[url:value = 'http://182.124.9.99:47755/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a038d869-b600-57ee-3d78-0000d2934228","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.90.149.223:46931/bin.sh","pattern":"[url:value = 'http://39.90.149.223:46931/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fefd960-de65-d8ce-752a-0000dcee0f0e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.202.74:59244/i","pattern":"[url:value = 'http://61.53.202.74:59244/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eba346a1-cf11-2615-18c2-0000c53068c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_ff630ced898745f7.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_ff630ced898745f7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f84d3e4-7e36-1ca0-e391-00001a5dec08","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://revengegrompegroups.pl/cgi-webpage/aoncontentspagesviewscontentsfilesevelopmentviewscxpagessuccessorfilesd/vhgvgcjg.exe","pattern":"[url:value = 'https://revengegrompegroups.pl/cgi-webpage/aoncontentspagesviewscontentsfilesevelopmentviewscxpagessuccessorfilesd/vhgvgcjg.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e573551-7b36-6931-767b-0000ce3607c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.armv7l","pattern":"[url:value = 'http://31.77.227.119/iran.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df3524d0-b164-3df0-7ab2-0000dea455c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/cat.sh","pattern":"[url:value = 'http://31.77.227.119/cat.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b279dfca-cbaa-8d57-81de-0000473746c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4144dfb259ed3b1b.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4144dfb259ed3b1b.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85efcd91-906a-c06d-aa64-00004646c106","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.115/meower.arm7","pattern":"[url:value = 'http://31.77.227.115/meower.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--699ccc87-84af-736c-cccb-00008efa0fef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.115/Services.apk","pattern":"[url:value = 'http://31.77.227.115/Services.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e691f713-b01e-2dcc-9b18-000036e38cc9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.115/meower.so","pattern":"[url:value = 'http://31.77.227.115/meower.so']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ffeedd9-2fd1-764a-4efa-0000c7fb1984","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_9022b6350736111c.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_9022b6350736111c.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b059bf4f-bf17-743e-e392-0000fe5ad4c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_e1a3f1926532a1e0.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_e1a3f1926532a1e0.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6349de11-b328-af8e-98c3-0000f9299d2f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.248/sysorbit.apk","pattern":"[url:value = 'http://176.65.139.248/sysorbit.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c1f63e7-7dbe-5b20-799a-00009b03b606","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.26.192.87/rondo.rxx.sh","pattern":"[url:value = 'http://194.26.192.87/rondo.rxx.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00fad144-f91d-ba99-ba8f-000046ae8fee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.138.214:53741/Mozi.m","pattern":"[url:value = 'http://59.96.138.214:53741/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--834a920d-a304-06f5-ea10-000029d09668","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://43.228.157.73/deploy.sh","pattern":"[url:value = 'http://43.228.157.73/deploy.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f71a162-3af6-e8de-c1dd-00002f3b969d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/gg11","pattern":"[url:value = 'http://191.44.112.89:889/gg11']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d3250fd-9db2-19f7-c9c9-00003b06a9c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.90.149.223:46931/i","pattern":"[url:value = 'http://39.90.149.223:46931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d8d174e-abb0-0f2f-2073-000018f89e02","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.196.40:38436/bin.sh","pattern":"[url:value = 'http://125.44.196.40:38436/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--646eeae3-4d80-cbbb-ad68-000051497c0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://220.192.252.142:56157/bin.sh","pattern":"[url:value = 'http://220.192.252.142:56157/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--076bef10-6193-a96e-75d9-0000ebd6b12a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.194.27.62:59829/i","pattern":"[url:value = 'http://27.194.27.62:59829/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--248efb6e-690b-9ef4-540a-00004b7735f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.150.62:42943/bin.sh","pattern":"[url:value = 'http://42.239.150.62:42943/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8372b00b-b1c6-fd29-a399-0000a2ed1464","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.149.185:50547/i","pattern":"[url:value = 'http://115.48.149.185:50547/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05472eb3-2b6e-99a9-05b0-0000d0d1d8fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://89.189.181.54:47685/i","pattern":"[url:value = 'http://89.189.181.54:47685/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f353f0fd-86af-8a80-7213-0000afb4442d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.4.203.194:35564/i","pattern":"[url:value = 'http://123.4.203.194:35564/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c051c2ed-953d-b69b-1075-0000b0ecd233","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.239.102.100:56270/bin.sh","pattern":"[url:value = 'http://112.239.102.100:56270/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87505a8e-c367-e8fe-255d-000034e29789","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.150.62:42943/i","pattern":"[url:value = 'http://42.239.150.62:42943/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1e03a0d-aba3-defa-af18-0000790dea2d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.239.102.100:56270/i","pattern":"[url:value = 'http://112.239.102.100:56270/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2900b718-5b7b-0214-9052-00004dc78f30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.202.0:42578/bin.sh","pattern":"[url:value = 'http://182.113.202.0:42578/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1eaca7a-9e8a-f78b-0615-0000dcda9c3b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.202.62:60041/i","pattern":"[url:value = 'http://105.186.202.62:60041/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcdbeb96-965c-4382-f287-0000a163a06b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://funneldiy.com/Installer_c2cea6.msi","pattern":"[url:value = 'https://funneldiy.com/Installer_c2cea6.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a1e570a-32d5-a0b7-1acc-0000f6143602","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.211.251:59971/bin.sh","pattern":"[url:value = 'http://182.123.211.251:59971/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--425a5429-55ef-fb5f-7cff-000096831839","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.10.67:46177/bin.sh","pattern":"[url:value = 'http://182.117.10.67:46177/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ddd5de4-3846-771a-2c8b-0000adeab0af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.10.67:46177/i","pattern":"[url:value = 'http://182.117.10.67:46177/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f070a126-a6b4-2063-28c9-00002faf8398","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.196.40:38436/i","pattern":"[url:value = 'http://125.44.196.40:38436/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfef20e8-7e96-fef5-d1a9-0000f6b61f22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.211.251:59971/i","pattern":"[url:value = 'http://182.123.211.251:59971/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71bd64e9-fe17-a689-e137-0000e604cf62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.194.92:40193/i","pattern":"[url:value = 'http://120.28.194.92:40193/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b1a9da2-0beb-d001-ace6-00001707c1c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.68.176:50130/bin.sh","pattern":"[url:value = 'http://182.117.68.176:50130/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84cf2e57-5dfb-265d-a6c5-00009d59ab12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/1372270670/Jz4KcAs.exe","pattern":"[url:value = 'http://62.60.226.140/files/1372270670/Jz4KcAs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbfcb351-d3fd-d617-ea91-0000e2eb42be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.23.92:55029/bin.sh","pattern":"[url:value = 'http://125.43.23.92:55029/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee1f926b-add6-6917-4ea0-00007e8b84ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.146/arm5","pattern":"[url:value = 'http://94.154.43.146/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1eaf0cca-228a-4b87-5571-00008292a753","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.146/x86_64","pattern":"[url:value = 'http://94.154.43.146/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61bb2f32-c504-b062-d0e0-00009d362658","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.146/mpsl","pattern":"[url:value = 'http://94.154.43.146/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d469e9fb-fd90-516d-7e81-0000f6354812","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.146/mips","pattern":"[url:value = 'http://94.154.43.146/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7716c3d1-6fbc-ba91-9c5b-00006c3e2b02","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.146/arm6","pattern":"[url:value = 'http://94.154.43.146/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--374b1b01-4376-df26-b7a9-0000bd8c7c2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.m68k","pattern":"[url:value = 'http://94.154.43.237/miron.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdfc7abf-998a-6300-cac3-00005bafd335","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.arc","pattern":"[url:value = 'http://94.154.43.237/miron.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--060ec39d-4d33-16b6-5f7a-000006d2c781","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.armv5l","pattern":"[url:value = 'http://94.154.43.237/miron.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9918a2fd-918a-2856-a01c-0000c637e389","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.146/arm4","pattern":"[url:value = 'http://94.154.43.146/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0011f347-5959-41f5-be04-0000d4824c67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.146/arm7","pattern":"[url:value = 'http://94.154.43.146/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b672fd7-ca76-ebee-078b-0000bd7aaaf6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.mips","pattern":"[url:value = 'http://94.154.43.237/miron.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d23905e-ab41-540b-44e8-00004172bd51","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.armv6l","pattern":"[url:value = 'http://94.154.43.237/miron.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae777571-055b-ff31-36c2-00003d6c2e4b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.i486","pattern":"[url:value = 'http://94.154.43.237/miron.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dbe0920-86da-ea7d-6a1f-000031202681","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.powerpc","pattern":"[url:value = 'http://94.154.43.237/miron.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78ffb588-0700-d21d-2e03-0000afe0ba9e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.mipsel","pattern":"[url:value = 'http://94.154.43.237/miron.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca56bde1-72f7-c274-2cd5-00008f35dbc7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/a.sh","pattern":"[url:value = 'http://94.154.43.237/a.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a77c332d-4ee5-25a2-0911-0000693bc89d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.sh4","pattern":"[url:value = 'http://94.154.43.237/miron.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f15f2dc-4a7b-3829-d602-00003bb2ee31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.armv4l","pattern":"[url:value = 'http://94.154.43.237/miron.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3438a11f-4fe7-8459-f163-00007c1294e1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.armv7l","pattern":"[url:value = 'http://94.154.43.237/miron.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5599afef-828f-d1d0-5d04-0000f68459a0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.x86_64","pattern":"[url:value = 'http://94.154.43.237/miron.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e84b36c7-cb48-e2ea-0beb-00000884ccee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.sparc","pattern":"[url:value = 'http://94.154.43.237/miron.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c06aabe2-8224-b1cc-a733-0000be84acc4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.175/arm6","pattern":"[url:value = 'http://94.154.43.175/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f72d2e6c-d5e5-e469-e910-0000fb632244","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.mipsrouter","pattern":"[url:value = 'http://94.154.43.237/miron.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5963fa58-7585-df40-bf30-0000ac31032a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.175/arm5","pattern":"[url:value = 'http://94.154.43.175/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6c74701-9c7f-26f3-c4c9-00004f8ca19e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.175/mpsl","pattern":"[url:value = 'http://94.154.43.175/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--631581c8-fef2-0ab7-8102-0000248fcfd4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.175/mips","pattern":"[url:value = 'http://94.154.43.175/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a26b9aa9-630f-3576-2e64-00007311f9a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.arm7","pattern":"[url:value = 'http://94.154.43.10/nz/nz.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0381ab32-4389-7774-86f8-000004d5a2c7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.arm","pattern":"[url:value = 'http://94.154.43.10/nz/nz.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3c146dc-10bd-4f14-f012-00003aa5939c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.mpsl","pattern":"[url:value = 'http://94.154.43.10/nz/nz.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6591c3e-4146-cc43-a1ce-00002e4339df","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.x86","pattern":"[url:value = 'http://94.154.43.10/nz/nz.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a3fb4c3-26f3-99eb-13a0-000051502b0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.m68k","pattern":"[url:value = 'http://94.154.43.10/nz/nz.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b76d9b74-aa79-4ec9-b410-00000638cba1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.175/arm7","pattern":"[url:value = 'http://94.154.43.175/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beb9cfa7-1032-4ca4-e8e6-0000d69ece5c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.sh4","pattern":"[url:value = 'http://94.154.43.10/nz/nz.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0870edd-fda0-07c6-cd1a-00009c78d860","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.i686","pattern":"[url:value = 'http://94.154.43.10/nz/nz.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76138015-3f60-e38e-a6f9-000051a6fdd6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.mips","pattern":"[url:value = 'http://94.154.43.10/nz/nz.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9ad93a9-8108-f737-ca6c-0000d0d42504","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.spc","pattern":"[url:value = 'http://94.154.43.10/nz/nz.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c65fb85-cf55-992b-c9ca-0000d9183128","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.arm5","pattern":"[url:value = 'http://94.154.43.10/nz/nz.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--783f810e-b25f-a04b-4c6f-00006a16eceb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz.sh","pattern":"[url:value = 'http://94.154.43.10/nz.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4398635-8e68-f2ab-5114-0000e40ad5f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.arc","pattern":"[url:value = 'http://94.154.43.10/nz/nz.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--401a56bb-3446-bae5-9aa8-00002cfe57b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/debug","pattern":"[url:value = 'http://94.154.43.10/nz/debug']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbeb2df0-948b-4cb5-0a98-0000564057aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.ppc","pattern":"[url:value = 'http://94.154.43.10/nz/nz.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d56caa3f-6c4e-c685-db68-0000cbad9ec6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.arm6","pattern":"[url:value = 'http://94.154.43.10/nz/nz.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea3ca92e-f284-f1a9-9069-0000960f5589","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.x86_64","pattern":"[url:value = 'http://94.154.43.10/nz/nz.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15ae4408-27e3-ddff-fd52-00005f1e10ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.i586","pattern":"[url:value = 'http://94.154.43.84/eclipse.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eabce564-154c-0308-c823-00005a76deb6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.mipsel","pattern":"[url:value = 'http://94.154.43.84/eclipse.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d56a230-4322-5d24-a69f-0000ce248a19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.armv4l","pattern":"[url:value = 'http://94.154.43.84/eclipse.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7daff03-bc62-b40d-dba3-000003123d88","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.x86_64","pattern":"[url:value = 'http://94.154.43.84/eclipse.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c1178d9-c4e9-b801-8370-0000fb789871","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.sh4","pattern":"[url:value = 'http://94.154.43.84/eclipse.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17e8fa51-5f07-f507-db23-0000d98a6243","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.i686","pattern":"[url:value = 'http://94.154.43.84/eclipse.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--944d9371-8ac5-1173-b41c-0000f344a3a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.armv5l","pattern":"[url:value = 'http://94.154.43.84/eclipse.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a490e423-06a3-c934-933a-00000460181f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.powerpc","pattern":"[url:value = 'http://94.154.43.84/eclipse.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf60c0b2-5705-b078-8beb-0000b4e4d979","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.armv6l","pattern":"[url:value = 'http://94.154.43.84/eclipse.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d50404f-2399-354b-cb4d-000014a2912f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.m68k","pattern":"[url:value = 'http://94.154.43.84/eclipse.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c17c7499-78a7-3b42-42b3-0000145447f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.mips","pattern":"[url:value = 'http://94.154.43.84/eclipse.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a67bf1f3-8d8d-d708-69ca-00008984f0c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.armv7l","pattern":"[url:value = 'http://94.154.43.84/eclipse.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7112846-1e7b-a0b6-8a62-0000b78c3a43","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/w.sh","pattern":"[url:value = 'http://94.154.43.122/w.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d7d6026-717b-ee36-906d-000083ff19a7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/arm","pattern":"[url:value = 'http://94.154.43.122/bins/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d16124e-765e-ec53-57a4-00000252208b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/x86_64","pattern":"[url:value = 'http://94.154.43.122/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cb7a8a3-92dd-f035-acdf-00001c93b635","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/mips","pattern":"[url:value = 'http://94.154.43.122/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56c1d333-4afb-c862-5bac-0000942d7acb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/arm5","pattern":"[url:value = 'http://94.154.43.122/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40700829-eac4-9102-ed92-00005b36c3b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/mipsel","pattern":"[url:value = 'http://94.154.43.122/bins/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b75158bd-68e8-ceec-e32f-000057fe9e64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/spc","pattern":"[url:value = 'http://94.154.43.122/bins/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8cfb21f-8531-ab2c-ca2b-00003e24b240","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/arm7","pattern":"[url:value = 'http://94.154.43.122/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--209b9c75-c36d-499f-23b5-00001c6560ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/m68k","pattern":"[url:value = 'http://94.154.43.122/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfc88289-a8fc-9ae5-9e8d-00008698d525","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/arm6","pattern":"[url:value = 'http://94.154.43.122/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98a5d72a-e749-b264-46c1-0000a96982bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/x86","pattern":"[url:value = 'http://94.154.43.122/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c04504b3-ea66-dee0-81c7-000051b4753c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/sh4","pattern":"[url:value = 'http://94.154.43.122/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b517e6e4-9c3e-a227-1431-0000d16aecca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/ppc","pattern":"[url:value = 'http://94.154.43.122/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3228aa6a-9c4a-3ba4-f401-0000d06bf7f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.13.24:36195/bin.sh","pattern":"[url:value = 'http://182.112.13.24:36195/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57895b2b-7ade-c8bb-263d-00000d4553e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.86.0:40490/i","pattern":"[url:value = 'http://110.36.86.0:40490/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8f5b5f5-3ed8-7f2e-3e89-0000131ca803","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.135.190:37738/bin.sh","pattern":"[url:value = 'http://175.149.135.190:37738/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c54fbf35-b9bc-e0f5-fad6-000053e88c66","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.224.167:59812/bin.sh","pattern":"[url:value = 'http://110.39.224.167:59812/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc8f53aa-f1bf-db6d-6c1b-0000cc080dc2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://93.152.223.228/svc.exe","pattern":"[url:value = 'http://93.152.223.228/svc.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9056a341-dfcc-6104-234f-0000820cb922","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://104.239.66.70/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://104.239.66.70/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--506c9e3b-e7ad-b856-8e14-0000778ec568","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/1372270670/0NOjfFC.exe","pattern":"[url:value = 'http://62.60.226.140/files/1372270670/0NOjfFC.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be565f17-963c-f3a6-999f-0000523445bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.224.167:59812/i","pattern":"[url:value = 'http://110.39.224.167:59812/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff46dc40-a22a-2387-27ad-000036dea627","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.13.149.41:37814/bin.sh","pattern":"[url:value = 'http://218.13.149.41:37814/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc33122d-239b-cdf0-5e3b-000003c78104","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://thu-iphone-07.cfd/PithnoModule.exe","pattern":"[url:value = 'https://thu-iphone-07.cfd/PithnoModule.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9494cd51-0d9c-50b4-ab60-0000103effe3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.135.190:37738/i","pattern":"[url:value = 'http://175.149.135.190:37738/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b31b0cb5-9d4f-8479-2876-00001133ff06","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.23.92:55029/i","pattern":"[url:value = 'http://125.43.23.92:55029/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a55342b4-cf7d-c479-427e-0000060c3e0e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.13.149.41:37814/i","pattern":"[url:value = 'http://218.13.149.41:37814/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8015d086-e21d-02ad-f067-0000fd2b03e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.8.160.185:35924/i","pattern":"[url:value = 'http://123.8.160.185:35924/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af0a3f1c-3d2a-d3e2-ba9c-00005941dc37","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.8.160.185:35924/bin.sh","pattern":"[url:value = 'http://123.8.160.185:35924/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7c67792-9140-663b-48f5-00001898a143","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/1372270670/Cgt6XB8.exe","pattern":"[url:value = 'http://62.60.226.140/files/1372270670/Cgt6XB8.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95ca2a05-792b-5bf7-90e1-0000e6676056","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.234:45761/bin.sh","pattern":"[url:value = 'http://210.208.111.234:45761/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--401a7f47-bd38-10c7-c734-0000d46642e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.58.88.232:50270/bin.sh","pattern":"[url:value = 'http://115.58.88.232:50270/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7060eee2-c502-0d65-bb66-0000d35ffe2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.234:45761/i","pattern":"[url:value = 'http://210.208.111.234:45761/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cee8d096-5444-7f9c-c8ef-000022012e77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.252.34:44324/i","pattern":"[url:value = 'http://59.97.252.34:44324/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73a94e8d-bc18-33b7-1645-0000dc6bb4c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.194.27.62:59829/bin.sh","pattern":"[url:value = 'http://27.194.27.62:59829/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92a4681d-9d31-8f20-4ee7-00009c17f341","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.239.81.215:38553/i","pattern":"[url:value = 'http://113.239.81.215:38553/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd872b4b-a2b3-a666-63cd-00008d15ccb8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.151.64.247:42583/bin.sh","pattern":"[url:value = 'http://175.151.64.247:42583/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04e48520-d367-61ca-47fc-00002da84925","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/debug.dbg","pattern":"[url:value = 'http://198.144.179.82/debug.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63481e06-5725-e9b1-d92a-00005cbdcf02","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/x86","pattern":"[url:value = 'http://198.144.179.82/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64e25219-3d30-df25-aa94-0000210861b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/arm5","pattern":"[url:value = 'http://198.144.179.82/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdeb03a3-a5b6-091a-0e7d-000033bdce59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/arm6","pattern":"[url:value = 'http://198.144.179.82/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98c25ff3-55fb-c1da-bd76-00000bbd6ab8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/x86_64","pattern":"[url:value = 'http://198.144.179.82/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cbc9191-5bba-4793-c604-0000a22ad3d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/spc","pattern":"[url:value = 'http://198.144.179.82/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ba8cd9f-d620-d30d-3324-0000a4603881","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/sh4","pattern":"[url:value = 'http://198.144.179.82/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4efa2fc8-b7b5-fbdc-93ef-000024bea177","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/ppc","pattern":"[url:value = 'http://198.144.179.82/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aec3335-e10a-7a53-c13b-00008b01a93c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/arm7","pattern":"[url:value = 'http://198.144.179.82/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8690a90a-b9fa-b98c-2fc3-0000762b541a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/arm","pattern":"[url:value = 'http://198.144.179.82/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb46ef40-dea6-e9d9-08f1-0000c2b5c303","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/mpsl","pattern":"[url:value = 'http://198.144.179.82/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e942989-a8bb-d41f-b42c-0000a9b6ad49","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/mips","pattern":"[url:value = 'http://198.144.179.82/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc940269-d1f5-3733-4326-000076248062","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/arm64","pattern":"[url:value = 'http://198.144.179.82/arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12b81d5f-286f-aa3a-feaf-0000a9407b93","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/m68k","pattern":"[url:value = 'http://198.144.179.82/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--542b6310-ebf7-2430-08a6-00000a3c27ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/8894093030/v8eACE4.exe","pattern":"[url:value = 'http://62.60.226.140/files/8894093030/v8eACE4.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c23c69a9-dbc0-bbcb-6683-0000b98f8fea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.224.11:42582/bin.sh","pattern":"[url:value = 'http://42.239.224.11:42582/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c4c4c8c-c1d2-4830-7c6a-00003fffaa64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.181.102.189:53344/bin.sh","pattern":"[url:value = 'http://103.181.102.189:53344/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da85dcd7-cc21-da28-4f95-0000ccef9b7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.48.114.30:60517/bin.sh","pattern":"[url:value = 'http://36.48.114.30:60517/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--085b09e9-e889-0957-5b46-00007f3e9dbc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://95.56.232.109:58750/i","pattern":"[url:value = 'http://95.56.232.109:58750/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0f15d40-65de-5b4c-bfdc-00004143292d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.224.11:42582/i","pattern":"[url:value = 'http://42.239.224.11:42582/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f13f9abb-d708-222d-4c1c-000000b51b03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.4.203.194:35564/bin.sh","pattern":"[url:value = 'http://123.4.203.194:35564/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11722625-0b00-970d-caf5-0000b7255280","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.177.244.198:55825/i","pattern":"[url:value = 'http://60.177.244.198:55825/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08b4132c-360b-8c48-f069-000068c2cc25","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.48.114.30:60517/i","pattern":"[url:value = 'http://36.48.114.30:60517/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44f6836d-01c3-b989-2629-0000f0098138","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.143.22:37354/bin.sh","pattern":"[url:value = 'http://182.123.143.22:37354/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f661f74-1167-3ab5-e5ca-0000ce054fbe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.175.206:55714/i","pattern":"[url:value = 'http://123.5.175.206:55714/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cac31421-fd9f-839d-94fe-0000e13a2dec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.108.253.192:53587/bin.sh","pattern":"[url:value = 'http://101.108.253.192:53587/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fb1bac4-6429-b06a-734c-0000c09cbe35","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.121.27:53153/i","pattern":"[url:value = 'http://105.184.121.27:53153/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a55504c9-7c4f-1af5-12bd-0000156588bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.143.22:37354/i","pattern":"[url:value = 'http://182.123.143.22:37354/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31e895c9-727b-177b-fa47-0000c8effc45","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_ef0a1d0d3c396203.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_ef0a1d0d3c396203.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e5e7528-ce15-42dd-8508-00001cb3a388","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.214.215:48371/i","pattern":"[url:value = 'http://120.84.214.215:48371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28b54640-6461-3d04-bf7e-000099c467c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/qqp40e2zv0?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/qqp40e2zv0?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--195b7023-3827-dcd1-18ae-00001dfb4c84","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/pecxqaf4jh?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/pecxqaf4jh?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2757082e-3bda-7516-348e-0000fb73603c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/y6lkjsua3s?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/y6lkjsua3s?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f4b01d4-5544-c783-60a5-000086e37184","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/xwrwybh158?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/xwrwybh158?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--977259ec-6634-da0e-7b48-000081fc9af0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/f0f46g94yc?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/f0f46g94yc?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--526e7ed4-b711-0843-1bf3-00006540c037","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/bnah2628wi?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/bnah2628wi?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4819d81-7508-6bf7-9c36-00004ad1733c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/vuh58w66ti?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/vuh58w66ti?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af64e53e-81f6-4577-e8c9-0000b3552f73","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/keexr0blbj?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/keexr0blbj?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49115d1b-977f-106c-640f-000081a00a9d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/retlfugt5m?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/retlfugt5m?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f66cce6-f9a2-ab9f-7ea4-00009a87b5ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/d9ci5mrwdp?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/d9ci5mrwdp?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--787361b4-46a3-373b-14d2-000083cb697a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/8a68bbgk43?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/8a68bbgk43?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e4dd394-a3f9-301e-67fa-0000ac14fe2d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/mqm274gghg?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/mqm274gghg?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05dfb7fa-52fc-b39b-a1b4-0000f1cd4497","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/ix31e5lx8q?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/ix31e5lx8q?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4c9b1cc-d723-a177-782c-000073a5cf83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/qn9ioh7vz4?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/qn9ioh7vz4?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d55e2ed2-7141-f4ea-aee2-0000fdafd1fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/2b672mob79?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/2b672mob79?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c575944-4c70-bf48-a6eb-00001d934264","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/tbzh1mia7u?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/tbzh1mia7u?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81102e18-8a9e-3564-a896-0000f0f3aeaf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/r3vupm6d65?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/r3vupm6d65?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ede5def3-712e-7fb0-29e5-00008c2f76ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/p6ov18cev6?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/p6ov18cev6?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8faefa5f-bb24-2e0d-0f76-00004cabab74","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/5yfzhpc2to?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/5yfzhpc2to?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a1aa30e-9c82-9393-61cc-000086a07eae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/68p6ojwjvh?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/68p6ojwjvh?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7da5da0a-7e98-b6eb-c97e-0000248abaf7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/kn6kof4crc?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/kn6kof4crc?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb5bd289-26db-7915-9b11-000055254aab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/bp7dbsur0q?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/bp7dbsur0q?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90893f94-1823-231e-eeb1-0000c2d644aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.41.127:41358/i","pattern":"[url:value = 'http://182.113.41.127:41358/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14655332-8bce-1862-1afe-00007fd7ef04","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.194.30:35812/i","pattern":"[url:value = 'http://120.28.194.30:35812/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56cad90b-9dd7-18bd-ac2c-0000d368ffe1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.108.253.192:53587/i","pattern":"[url:value = 'http://101.108.253.192:53587/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--666a9b1a-2692-8170-5619-0000da15b8f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://95.56.232.109:58750/bin.sh","pattern":"[url:value = 'http://95.56.232.109:58750/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fea00cf2-3e4d-ed41-9123-000038550e0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.180.132.10:54132/bin.sh","pattern":"[url:value = 'http://59.180.132.10:54132/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2492082-b74a-b88b-fa64-00008c435724","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.226.69.203:60026/bin.sh","pattern":"[url:value = 'http://42.226.69.203:60026/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de2ca642-7590-54b4-fec9-00004ded6b52","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.226.69.203:60026/i","pattern":"[url:value = 'http://42.226.69.203:60026/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf3a4c10-528d-126c-0862-000072903fda","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.133.180:47839/bin.sh","pattern":"[url:value = 'http://196.190.133.180:47839/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9676def9-9eff-133f-6d56-0000e8be31ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.127.32:60165/bin.sh","pattern":"[url:value = 'http://123.14.127.32:60165/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf370f8f-f32b-7dd5-1fba-0000213aa06c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.133.180:47839/i","pattern":"[url:value = 'http://196.190.133.180:47839/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e65c4373-3580-f95b-a516-00001b489258","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.153.109:41774/i","pattern":"[url:value = 'http://61.53.153.109:41774/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d90cd38b-812e-cadf-a562-0000bab56be1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4b8d61b5a6f660b5.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4b8d61b5a6f660b5.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d10b325-6735-d4f0-92de-000018af2c87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://114.227.64.43:42442/bin.sh","pattern":"[url:value = 'http://114.227.64.43:42442/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3c99b8d-5116-14bc-5eed-00006d96e47b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.162.6:59734/i","pattern":"[url:value = 'http://42.234.162.6:59734/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a57ea5b-a9a1-78bd-7929-0000c5015ba4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.127.32:60165/i","pattern":"[url:value = 'http://123.14.127.32:60165/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f63feff-3506-fc9d-08e7-0000146a8dbd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.153.69:57210/bin.sh","pattern":"[url:value = 'http://123.5.153.69:57210/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1ae888a-351e-5531-a75b-0000dae047a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.113.64:48265/i","pattern":"[url:value = 'http://182.116.113.64:48265/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaeaec7d-b7f0-67a1-8401-00001a4b09c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.194.129:53622/i","pattern":"[url:value = 'http://42.224.194.129:53622/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b347684-181d-89ea-bef4-00004a9bdc7c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.187.33:46290/bin.sh","pattern":"[url:value = 'http://42.231.187.33:46290/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ce75ef8-42e8-bd62-19d7-000055f760cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.236.135.234:57543/bin.sh","pattern":"[url:value = 'http://113.236.135.234:57543/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9144f868-0256-535e-f327-00001f66319b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.78.184:52484/bin.sh","pattern":"[url:value = 'http://182.117.78.184:52484/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f850749f-5ea9-e0f6-b2b6-00002201579d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.78.184:52484/i","pattern":"[url:value = 'http://182.117.78.184:52484/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c730de6-393e-5164-8a54-000025bbb70b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.210.180:57109/i","pattern":"[url:value = 'http://110.38.210.180:57109/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60d7e29b-4e88-c57d-eed8-000071cfc4c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://221.225.253.118:42553/bin.sh","pattern":"[url:value = 'http://221.225.253.118:42553/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa7bdc42-d733-2476-4bd2-00006d323e5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.166.79.188:45758/bin.sh","pattern":"[url:value = 'http://119.166.79.188:45758/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2f0c221-69b2-f520-ceb4-000089882e6b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.166.79.188:45758/i","pattern":"[url:value = 'http://119.166.79.188:45758/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10402521-825e-6492-0cd7-000053d6f81e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.67.38:47591/bin.sh","pattern":"[url:value = 'http://42.224.67.38:47591/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf1c3bc9-4259-895b-4856-000042bb5bd9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.236.135.234:57543/i","pattern":"[url:value = 'http://113.236.135.234:57543/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4f205f4-8f16-9a45-4bb1-0000687ff973","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://221.225.253.118:42553/i","pattern":"[url:value = 'http://221.225.253.118:42553/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3102cb44-1ae4-f8e3-5da0-000045e50f2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.211.139:46635/i","pattern":"[url:value = 'http://110.38.211.139:46635/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ac886b4-d170-49c8-c018-0000ce476607","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.187.33:46290/i","pattern":"[url:value = 'http://42.231.187.33:46290/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70e828d0-e577-81a5-8889-00008a73b40e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.41.95:38149/bin.sh","pattern":"[url:value = 'http://123.9.41.95:38149/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bac2dcc6-13a9-7cf7-c85b-000039b38669","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.67.38:47591/i","pattern":"[url:value = 'http://42.224.67.38:47591/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20b38a1f-821d-ca70-01ce-000070083334","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.77.162:44453/bin.sh","pattern":"[url:value = 'http://110.36.77.162:44453/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff00e482-19a3-1d24-4707-00002cd5bc57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.9.97:44103/i","pattern":"[url:value = 'http://115.55.9.97:44103/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65a2fbe9-6bbb-1ce6-d439-00009dd55456","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.i486","pattern":"[url:value = 'http://91.92.47.97/bins/bot.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c4b2ccb-6da3-1dd2-63fe-0000b1b3cf25","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.47.97/bins/wget.sh","pattern":"[url:value = 'http://91.92.47.97/bins/wget.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6613c5ca-f6f3-bd6c-f760-00005a7d348b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.ppc","pattern":"[url:value = 'http://91.92.47.97/bins/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1341279d-5ee3-658f-cd8e-0000daa3ad7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.sh4","pattern":"[url:value = 'http://91.92.47.97/bins/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05606786-9438-c5c0-55d2-000076c0bea1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.mpsl","pattern":"[url:value = 'http://91.92.47.97/bins/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e601ca0f-3c7d-220b-1526-0000b9380d27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.x86_64","pattern":"[url:value = 'http://91.92.47.97/bins/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13cd8b65-631b-92c2-de6a-000087c8b3fb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.arm6","pattern":"[url:value = 'http://91.92.47.97/bins/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0b2a14f-7ae9-b2e6-e7bd-00001dc3d0eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.mips","pattern":"[url:value = 'http://91.92.47.97/bins/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64557b93-34e9-ac04-c76c-0000dce94625","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.spc","pattern":"[url:value = 'http://91.92.47.97/bins/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49c16e0f-a5b5-ed93-49e9-0000e837b6d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.arc","pattern":"[url:value = 'http://91.92.47.97/bins/bot.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ac4dadf-9ab5-4e56-8d7c-0000957d1c15","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.arm5","pattern":"[url:value = 'http://91.92.47.97/bins/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efdb2620-b321-f996-721e-00001ee48bd9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.ppc440","pattern":"[url:value = 'http://91.92.47.97/bins/bot.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--646091de-63ec-7cf5-fca7-0000568987f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.i586","pattern":"[url:value = 'http://91.92.47.97/bins/bot.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f475a662-3060-dabc-6f3e-00006717c4c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.arm8","pattern":"[url:value = 'http://91.92.47.97/bins/bot.arm8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdc3ea49-cc7c-fedc-92fe-00002dc17b70","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.arm4","pattern":"[url:value = 'http://91.92.47.97/bins/bot.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc9e9599-7ad3-be9e-f7a3-00001d350631","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.m68k","pattern":"[url:value = 'http://91.92.47.97/bins/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64cabbf3-25fc-8fb8-d5ee-00003f74d49e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.arm7","pattern":"[url:value = 'http://91.92.47.97/bins/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ba1f404-3aff-0d2b-5be0-0000227e5afe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.x86","pattern":"[url:value = 'http://91.92.47.97/bins/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04c9c8d3-eea5-f549-5c3b-00009a22e991","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.172:59900/i","pattern":"[url:value = 'http://210.208.110.172:59900/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96c31e37-d036-4d24-6e08-0000037e1af8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.184.149.85:39731/bin.sh","pattern":"[url:value = 'http://60.184.149.85:39731/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--137e1cb8-4a32-b94f-c493-00006ef1eb73","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.117.199:59554/i","pattern":"[url:value = 'http://115.54.117.199:59554/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba5abd48-4ac5-e5db-8c1b-0000502af173","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.13.126:32997/bin.sh","pattern":"[url:value = 'http://222.141.13.126:32997/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac2b1257-d0e6-822a-cdac-000049cdf4a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.58.143.1:46827/bin.sh","pattern":"[url:value = 'http://115.58.143.1:46827/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48994f0e-66cf-463c-116e-000000da10c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.77.162:44453/i","pattern":"[url:value = 'http://110.36.77.162:44453/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b8884cb-a624-6f84-b5c8-0000d5006a19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.184.149.85:39731/i","pattern":"[url:value = 'http://60.184.149.85:39731/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e1c479e-ceae-0478-d0c7-0000a8c255d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.248.169:58267/i","pattern":"[url:value = 'http://110.39.248.169:58267/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c9bf6e1-6a6a-c0c6-a6a7-0000796df3a2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/523965","pattern":"[url:value = 'http://5.182.210.174/523965']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72ec1ebb-169f-d94b-b95e-00004080c5a1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/694268","pattern":"[url:value = 'http://5.182.210.174/694268']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d367acdf-0aff-af7e-f1d2-0000a3c7306e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/46c7b2","pattern":"[url:value = 'http://5.182.210.174/46c7b2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19b5c9ef-d724-0870-73ce-0000f7fbf92e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9846b5","pattern":"[url:value = 'http://5.182.210.174/9846b5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--063c568c-5867-ce0b-c213-0000dfd72119","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7836d7","pattern":"[url:value = 'http://5.182.210.174/7836d7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e1a268f-8fc7-bafc-46ec-000020a36333","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/00df69","pattern":"[url:value = 'http://5.182.210.174/00df69']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bc28539-a9a7-d1f4-5af6-0000ec525418","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8e5a00","pattern":"[url:value = 'http://5.182.210.174/8e5a00']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b67666c3-b1b4-6889-a9e4-0000ed5e7529","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/796fc4","pattern":"[url:value = 'http://5.182.210.174/796fc4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5770dea-afb5-5882-5193-00002bcc8adf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a8ac25","pattern":"[url:value = 'http://5.182.210.174/a8ac25']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4b5757e-fe36-4094-f2e5-0000435acaf0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/5969e9","pattern":"[url:value = 'http://5.182.210.174/5969e9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aaa0cd8-2427-3e9d-6afc-0000ed5a24a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1a029e","pattern":"[url:value = 'http://5.182.210.174/1a029e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bae0e34-d279-d8ff-681d-000078f9abc8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6b8b4d","pattern":"[url:value = 'http://5.182.210.174/6b8b4d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65e6cf18-5419-2461-4acc-0000e3483bcf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/47b560","pattern":"[url:value = 'http://5.182.210.174/47b560']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--417ef614-ff2a-a4dc-1813-00001a025443","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/acdc3b","pattern":"[url:value = 'http://5.182.210.174/acdc3b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61daacef-27ef-833e-0121-0000327c1a7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e51ddb","pattern":"[url:value = 'http://5.182.210.174/e51ddb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18992714-d8c9-097c-bdf2-0000bc4fd79f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c5ee89","pattern":"[url:value = 'http://5.182.210.174/c5ee89']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb551eac-5c43-65a9-760c-0000eb547bf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/4b26b9","pattern":"[url:value = 'http://5.182.210.174/4b26b9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20036c91-0880-39c7-f754-000058e6e258","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c9023c","pattern":"[url:value = 'http://5.182.210.174/c9023c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e778b6b-d1fe-3ea9-bc29-0000a6e2c41e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f873b2","pattern":"[url:value = 'http://5.182.210.174/f873b2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cdddb62-14a7-22ac-fcb0-0000258be8d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a1d493","pattern":"[url:value = 'http://5.182.210.174/a1d493']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f5ea4c0-b2f1-a3b6-5338-00002361d6ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8ec572","pattern":"[url:value = 'http://5.182.210.174/8ec572']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5ceab23-f2c3-b47e-b15e-0000ff523757","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d1d1d3","pattern":"[url:value = 'http://5.182.210.174/d1d1d3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6deb3487-7994-f461-b494-00009cfe80c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/fefd81","pattern":"[url:value = 'http://5.182.210.174/fefd81']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc63305e-7ce7-e8ff-4338-000099a940d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b7e327","pattern":"[url:value = 'http://5.182.210.174/b7e327']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64b6a10f-9cc8-bc08-1305-00006a3499e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ba982a","pattern":"[url:value = 'http://5.182.210.174/ba982a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cca4d9ae-dce9-9fca-e201-0000a6d12caf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/de3e3b","pattern":"[url:value = 'http://5.182.210.174/de3e3b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f6a7a29-d599-6943-4737-0000bb5d2184","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c6503e","pattern":"[url:value = 'http://5.182.210.174/c6503e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--369cff40-5a43-2d52-c7b2-0000ee71ea45","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/af8816","pattern":"[url:value = 'http://5.182.210.174/af8816']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd6bbe3d-6dfc-22b5-0e38-000078e30876","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/dfbfd1","pattern":"[url:value = 'http://5.182.210.174/dfbfd1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8a7d69f-2a6c-5e17-6164-00009de9ee09","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a74d7e","pattern":"[url:value = 'http://5.182.210.174/a74d7e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ededa808-6727-8a0e-97dc-00004200bcdf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1b2ad0","pattern":"[url:value = 'http://5.182.210.174/1b2ad0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49b8dc84-5d8d-8fd1-f72e-0000fa7d4716","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1493f3","pattern":"[url:value = 'http://5.182.210.174/1493f3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b71c7d41-5ff8-4644-faf0-00000bbef91a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/18c0c9","pattern":"[url:value = 'http://5.182.210.174/18c0c9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93964e5f-e869-197b-0522-0000e400784a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e6af82","pattern":"[url:value = 'http://5.182.210.174/e6af82']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e69061c-cc11-5c50-9d59-0000837e61ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ef2a92","pattern":"[url:value = 'http://5.182.210.174/ef2a92']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22018b82-dfcb-4704-ccef-0000b9b7fb74","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8e9f60","pattern":"[url:value = 'http://5.182.210.174/8e9f60']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37899535-aeb7-63d6-5196-00004e842739","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/pm68k","pattern":"[url:value = 'http://157.173.119.111/bins/pm68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bafcbc5-7e47-2b7e-c913-00000d75a182","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.arc","pattern":"[url:value = 'http://77.239.124.108/iran.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4b3f2fd-4bfa-9702-d1df-00003d88c4c0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/px86_64","pattern":"[url:value = 'http://157.173.119.111/bins/px86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afddbb5f-ea24-d207-aa35-00006cc5f596","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/parm7","pattern":"[url:value = 'http://157.173.119.111/bins/parm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41d3da73-faae-678d-f194-0000c6cc3d1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/parm5","pattern":"[url:value = 'http://157.173.119.111/bins/parm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c58d9a9-f7a1-2d6f-9475-0000179584dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.aarch64","pattern":"[url:value = 'http://77.239.124.108/iran.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58edf57d-2794-93d4-d803-00001f2f35c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.powerpc","pattern":"[url:value = 'http://77.239.124.108/iran.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0343dd58-146a-0616-ede3-00004d9a91dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.x86_64","pattern":"[url:value = 'http://77.239.124.108/iran.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bf9e2e9-3997-4f47-386d-0000fa6c752c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.armv6l","pattern":"[url:value = 'http://77.239.124.108/iran.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8ca63b8-df19-ab72-3a96-00000a5af914","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/parm","pattern":"[url:value = 'http://157.173.119.111/bins/parm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50d4b12a-760b-a59a-0cb7-0000bdcc0ffc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.armv5l","pattern":"[url:value = 'http://77.239.124.108/iran.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12e65b23-73bd-41bb-ee67-0000de5b7ed7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/pspc","pattern":"[url:value = 'http://157.173.119.111/bins/pspc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65f2072d-6988-0aba-d095-0000d811958f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/psh4","pattern":"[url:value = 'http://157.173.119.111/bins/psh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce77672a-997e-cbaa-dff7-000025719fa9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/pmpsl","pattern":"[url:value = 'http://157.173.119.111/bins/pmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62e2d3a8-baf4-01cb-b23c-0000c70c5c9c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.armv7l","pattern":"[url:value = 'http://77.239.124.108/iran.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ba5a1e3-9257-edd2-b50a-00004e72f1e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/pmips","pattern":"[url:value = 'http://157.173.119.111/bins/pmips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81fda2f2-780e-76cb-a369-00001d0bb25b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.sparc","pattern":"[url:value = 'http://77.239.124.108/iran.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10a0e57a-c47f-940b-5e50-000058cf0c79","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/pppc","pattern":"[url:value = 'http://157.173.119.111/bins/pppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb31e444-588d-c21f-6a53-0000e82956ab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.mips","pattern":"[url:value = 'http://77.239.124.108/iran.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49cf806b-8f37-16fb-a83a-000080ac264c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.armv4l","pattern":"[url:value = 'http://77.239.124.108/iran.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8da8bc9-3cd6-7bd5-390f-0000d47992f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/parm6","pattern":"[url:value = 'http://157.173.119.111/bins/parm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e21bee2-1e16-0984-79a2-0000683fd216","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.i486","pattern":"[url:value = 'http://77.239.124.108/iran.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--871dd092-caab-2156-4a86-0000e8df8071","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.m68k","pattern":"[url:value = 'http://77.239.124.108/iran.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e25c73f-53e1-b7aa-8cdb-000014fe72e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.mipsel","pattern":"[url:value = 'http://77.239.124.108/iran.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--212f8257-2900-027b-7e9e-00003fe1ba2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.sh4","pattern":"[url:value = 'http://77.239.124.108/iran.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d12d4b4-4fdd-0046-61e8-000020cc620c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/px86","pattern":"[url:value = 'http://157.173.119.111/bins/px86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--133b1c4e-5a59-f1bc-5651-0000d90e510e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.sparc","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee38f883-acef-7c75-4e80-0000e36233b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_ba5747ef480cf9f7.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_ba5747ef480cf9f7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eea95cdc-a4ad-6bc1-21ed-0000c9e18000","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3cca71a2b980b74a.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3cca71a2b980b74a.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d454baa2-e8c9-10ef-9918-00005ca61fab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_40500e12ca54e02b.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_40500e12ca54e02b.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1054014b-6a82-d3eb-6439-0000fda48333","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.sh4","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb007884-2b05-671c-8822-0000f5ac05b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_babe547392332f73.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_babe547392332f73.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e2053ce-6c4f-e9cb-73c9-0000c5bfd0f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_31dd752749e9338c.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_31dd752749e9338c.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1778aa22-bae5-a355-f4f9-0000c5897a5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.sh4","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e600b1ec-0068-5bc3-f287-0000a950f375","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.sparc","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb6836df-90ea-6ed2-2254-0000b8d64f57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.mips","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afaf31f2-cb3c-9bdd-c693-0000c2025b74","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.arm8","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.arm8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f102c63-79d5-ff44-cc44-00009a614b22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.arm7","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d44d074f-2230-7c36-ace0-0000c89c246d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.mipsel","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f92b1d28-a966-638f-db58-000091f8c753","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.x86_64","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa40ceb7-4434-660a-397e-000017c216c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.arm","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7440209-6289-62be-8cfc-0000b820998d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.m68k","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f9879bb-87f4-fa0c-dc86-00003d548dd9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.x86","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--622a4875-52e8-a638-6fef-00004557e3ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.ppc","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df01c388-f264-6f6a-961b-00008c80bb52","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.mips","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad6c65de-3fa5-106a-e930-00002fefefa8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.arm","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48b4d2d2-c173-d004-d48d-0000057974b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.x86","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bc6c4a5-f529-e8ad-5d83-0000f654af71","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.arm8","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.arm8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec60fe26-7274-00b5-a7b0-00000f3bd27b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.mipsel","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b79d934-2efa-8068-9a26-0000ae37bf27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.arm7","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11279980-6e2f-6f49-cfc6-000010cada07","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/dl.sh","pattern":"[url:value = 'http://91.92.42.242:7768/dl.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efe4a4bb-5c22-0251-4941-000050710b3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/dlink.sh","pattern":"[url:value = 'http://31.77.227.102/dlink.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da8b5c8d-56c8-2854-f721-000071ff8557","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/dl.sh","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/dl.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29d2aeed-f677-ad16-5557-00000d1524eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.arc","pattern":"[url:value = 'http://94.154.43.67/bins/David.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a04014a-4e6f-b802-c8da-0000970db8ca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.i586","pattern":"[url:value = 'http://94.154.43.67/bins/David.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da639507-ebd3-ea64-e5bc-000029b41d4c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.mips64","pattern":"[url:value = 'http://94.154.43.67/bins/David.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03235831-9891-159a-fa73-000001da6c24","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.x86_64","pattern":"[url:value = 'http://94.154.43.67/bins/David.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e178cbf2-4b5a-c500-ec8f-000034e6157a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.sparc","pattern":"[url:value = 'http://94.154.43.67/bins/David.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9b7f530-d1c8-11cf-0e9b-0000ecd39350","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://43.228.157.73/check3.sh","pattern":"[url:value = 'http://43.228.157.73/check3.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c106e441-b0a1-c578-f191-0000565f3145","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.x86_64","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6506e31c-1cc1-9419-281e-00007d7a1ac5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.ppc","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--932df75e-124a-2325-a87a-00008c766d88","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.m68k","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a76b91e-fa26-1442-3751-00006eaf0a26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.59.235.112:57254/bin.sh","pattern":"[url:value = 'http://42.59.235.112:57254/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0443051-13e3-5a53-0344-000037ffb2f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.13.126:32997/i","pattern":"[url:value = 'http://222.141.13.126:32997/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15aa7c88-c036-a2c7-81bd-0000aed9738f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.50.112:50970/bin.sh","pattern":"[url:value = 'http://182.116.50.112:50970/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a13087b-77ac-f5b0-9a8c-0000e0b509e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.58.143.1:46827/i","pattern":"[url:value = 'http://115.58.143.1:46827/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88687dbe-46e6-88b6-01aa-0000e24e78ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.50.112:50970/i","pattern":"[url:value = 'http://182.116.50.112:50970/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c03a2e04-0e06-2c23-f8f5-00003e743d2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.193.143:37216/bin.sh","pattern":"[url:value = 'http://120.28.193.143:37216/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58299042-0acf-f4bd-b73b-0000b49b0e2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.100:32836/bin.sh","pattern":"[url:value = 'http://210.208.111.100:32836/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6529e1a4-1bd1-df5e-05c9-00002fd0eab6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.8.88.128:56380/i","pattern":"[url:value = 'http://123.8.88.128:56380/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3f0929c-ead1-98ae-85af-0000feb51e7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.193.143:37216/i","pattern":"[url:value = 'http://120.28.193.143:37216/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1242bc38-2093-b61a-d7fc-00000eac309c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.52.223:51706/bin.sh","pattern":"[url:value = 'http://42.235.52.223:51706/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--373a1dbc-f04b-c04b-2a02-00000152f743","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.100:32836/i","pattern":"[url:value = 'http://210.208.111.100:32836/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d824e15-ac5d-4505-ceed-000083d7a4bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.52.223:51706/i","pattern":"[url:value = 'http://42.235.52.223:51706/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e61af26-6b51-d2f6-c0ba-0000db9c8e0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.233.30.71:57935/bin.sh","pattern":"[url:value = 'http://42.233.30.71:57935/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a869601-a0ec-eb0d-6209-0000d674245a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.238.236.39:56045/i","pattern":"[url:value = 'http://42.238.236.39:56045/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6e5e8b3-c51d-a719-e9d9-000075a96a42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.112.14:60974/bin.sh","pattern":"[url:value = 'http://219.156.112.14:60974/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--786ba03e-11dd-2f6c-42d8-0000aee48975","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.131.92.150:58096/bin.sh","pattern":"[url:value = 'http://117.131.92.150:58096/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--537a0073-ec61-076c-6610-000012110bd6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://share.dovgertz.com/api/shares/AAWs5FQ3/files/322f1f5b-e04e-48f7-bf8e-91ad1bfeb2b4","pattern":"[url:value = 'https://share.dovgertz.com/api/shares/AAWs5FQ3/files/322f1f5b-e04e-48f7-bf8e-91ad1bfeb2b4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4867a0fd-8f66-df96-4ffb-000034bbed77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.233.30.71:57935/i","pattern":"[url:value = 'http://42.233.30.71:57935/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06c82fad-7e14-4497-6b04-0000a275f974","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://smsechodata.cc/run.bat","pattern":"[url:value = 'https://smsechodata.cc/run.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7c773e0-020e-24f8-805d-00005c86e89f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://timelevel12.com/big","pattern":"[url:value = 'https://timelevel12.com/big']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3553cfb-00d9-7c7a-710d-0000251505a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.122.251.128:38940/bin.sh","pattern":"[url:value = 'http://182.122.251.128:38940/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff9feb84-8223-72ce-7489-0000cf7052ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.112.14:60974/i","pattern":"[url:value = 'http://219.156.112.14:60974/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d643ce8-d832-92dc-3134-00006aab1825","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.26.192.87/rondo.gej.sh","pattern":"[url:value = 'http://194.26.192.87/rondo.gej.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba3efe6e-b68c-17d8-f760-0000fd6172a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.210.180:57109/Mozi.m","pattern":"[url:value = 'http://110.38.210.180:57109/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e35e71a9-d52f-4a5f-b559-0000982817e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.194/loader","pattern":"[url:value = 'http://176.65.139.194/loader']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--287f1b29-9fdd-54a3-0fa3-0000aa669fde","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.255.46:55570/i","pattern":"[url:value = 'http://125.42.255.46:55570/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcf36d12-98b6-2514-feda-00001f338420","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.238.236.39:56045/bin.sh","pattern":"[url:value = 'http://42.238.236.39:56045/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a32a8545-52d7-4110-e32a-00001f68affe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.101.187.5:40888/bin.sh","pattern":"[url:value = 'http://203.101.187.5:40888/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcca8ccb-89b1-6d56-3211-0000850bc01a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.129.132.69:54242/i","pattern":"[url:value = 'http://123.129.132.69:54242/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8571c66d-ebb2-4a77-95a0-00000edb2c3a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.237.104.66:52097/bin.sh","pattern":"[url:value = 'http://113.237.104.66:52097/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04d34f33-250b-5166-fc2a-0000ba60cec7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.36.197.26:60794/i","pattern":"[url:value = 'http://36.36.197.26:60794/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f004216-2c53-632c-9724-00002e92b7f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.237.104.66:52097/i","pattern":"[url:value = 'http://113.237.104.66:52097/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58aa08fc-cb79-5b67-5f55-0000b6720fbc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.131.92.150:58096/i","pattern":"[url:value = 'http://117.131.92.150:58096/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f891f41-326e-ba68-999b-0000dc10976c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.173.101.30:46920/bin.sh","pattern":"[url:value = 'http://123.173.101.30:46920/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8a97c8e-dc85-28f1-9291-0000335d5e7a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://dl.faster-cdn-hk.click/Telegram_v12.8.3.apk","pattern":"[url:value = 'http://dl.faster-cdn-hk.click/Telegram_v12.8.3.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1267fa3-0f91-bb07-7da4-000055e246a2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.101.187.5:40888/i","pattern":"[url:value = 'http://203.101.187.5:40888/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e0e867f-b56d-edf2-d1c2-000021ba7837","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.196.158:47839/i","pattern":"[url:value = 'http://115.55.196.158:47839/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6890956-66c8-003d-bca1-0000d9e197a7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.173.101.30:46920/i","pattern":"[url:value = 'http://123.173.101.30:46920/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81952ca2-7681-417f-79fa-000097dec044","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.217.35.11:45721/i","pattern":"[url:value = 'http://27.217.35.11:45721/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d89daee3-e353-c232-3724-0000e1e85511","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.arc","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac4d9515-e3ae-f643-1968-0000eac067eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.mpsl","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f74f0526-b2dd-8219-3488-000053a2d74f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.ppc","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cde74960-5123-d103-c790-0000a3740dd4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.arm7","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dafd34e8-f9d8-dc34-3c32-00002ba1b93a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.x86","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--821de771-e845-7c1f-30ae-0000d37c4eb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.sh4","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bae079f6-d42c-4095-4801-00001bc86ab1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.arm6","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f2583e4-38f3-293e-5b01-000001372222","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.arm","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ddb049f-2944-af3f-9014-000077547436","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.11.225:54040/i","pattern":"[url:value = 'http://110.36.11.225:54040/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16553036-8078-210e-0d8a-000010d74f12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.210.180:57109/bin.sh","pattern":"[url:value = 'http://110.38.210.180:57109/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9b39698-1d41-0bc5-9b55-0000720563b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://156.146.26.225:48881/bin.sh","pattern":"[url:value = 'http://156.146.26.225:48881/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa18189c-b12f-7171-50ce-0000910804cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.178.232:56864/bin.sh","pattern":"[url:value = 'http://115.50.178.232:56864/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--562d3084-b025-0ef6-31b6-000088d39c22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.52.21.229:35387/bin.sh","pattern":"[url:value = 'http://115.52.21.229:35387/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2152139-5148-09ad-9c2a-00003e8e6a7b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.59.109.9:54831/i","pattern":"[url:value = 'http://218.59.109.9:54831/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72953a46-4be0-aacd-7ef3-000025ad0d1c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.35.47:51278/i","pattern":"[url:value = 'http://125.44.35.47:51278/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a09bad50-dbb0-9820-e4af-0000e4bee3d6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.53.20.49:42959/bin.sh","pattern":"[url:value = 'http://116.53.20.49:42959/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2297f57-e817-d419-e6f4-00007790806c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.119.47:53986/i","pattern":"[url:value = 'http://61.53.119.47:53986/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78a80c84-f3ff-2973-1ed9-000066f2925c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.144.161:35460/i","pattern":"[url:value = 'http://120.28.144.161:35460/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1285976e-8439-f112-5a20-000015edc8e4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.255.204:47447/i","pattern":"[url:value = 'http://182.114.255.204:47447/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91129709-5f1d-41a0-2aa5-0000361e1325","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.212.190:40164/bin.sh","pattern":"[url:value = 'http://120.84.212.190:40164/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb5021dd-4375-e950-72a6-000096d3a711","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.191.34.236:49441/i","pattern":"[url:value = 'http://180.191.34.236:49441/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0661af34-60d8-5f8e-fb58-0000c43ef90c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.3.106:41323/i","pattern":"[url:value = 'http://125.40.3.106:41323/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdee2692-381b-e1ee-3807-00008e8d65a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.66.143:59123/i","pattern":"[url:value = 'http://115.56.66.143:59123/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--936e955d-1420-07f0-d1b6-0000362ecade","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.117.199:59554/bin.sh","pattern":"[url:value = 'http://115.54.117.199:59554/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e47be1a6-8603-36f5-16f3-0000a9310e81","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.161.116.2:53893/bin.sh","pattern":"[url:value = 'http://124.161.116.2:53893/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63cf495f-2a57-9757-bb16-0000b9f6072d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.140.186.83:34139/bin.sh","pattern":"[url:value = 'http://116.140.186.83:34139/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbcf69e1-348b-2407-cf13-0000e3b2f04d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.191.34.236:49441/bin.sh","pattern":"[url:value = 'http://180.191.34.236:49441/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16f16aad-68d1-3b93-4bdd-0000707eca2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://84.53.221.6:61495/i","pattern":"[url:value = 'http://84.53.221.6:61495/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c61815d-a67b-0725-6e92-0000883f0015","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.34.137:57791/bin.sh","pattern":"[url:value = 'http://182.116.34.137:57791/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efc97ed0-4848-49ea-31e4-00002afb5e1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.0.3:52567/bin.sh","pattern":"[url:value = 'http://115.50.0.3:52567/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b072162-2bdb-df4c-b967-0000addedabb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://72.255.30.244:42024/i","pattern":"[url:value = 'http://72.255.30.244:42024/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80f2e30e-5ff3-21e1-3f31-0000d8085b3b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.15.73:52944/bin.sh","pattern":"[url:value = 'http://182.119.15.73:52944/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--888208ab-fe35-fe38-52b5-0000ea349fa3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.161.119:46353/i","pattern":"[url:value = 'http://222.140.161.119:46353/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd6ac967-12e7-1f99-d86d-00000eb17c97","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.159.43:42655/bin.sh","pattern":"[url:value = 'http://61.52.159.43:42655/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48d5dc2c-d9d8-8be1-a3cc-00001e15562a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://180.191.42.15:52214/i","pattern":"[url:value = 'http://180.191.42.15:52214/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa26683d-566d-dc80-d81b-0000a7ec57c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.46.131.83:45094/i","pattern":"[url:value = 'http://125.46.131.83:45094/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a822146b-1b9a-e4a8-a80a-00004b3af776","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.178.232:56864/i","pattern":"[url:value = 'http://115.50.178.232:56864/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb29c64f-7400-9ddb-b452-000050a2674c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.118.24:44651/i","pattern":"[url:value = 'http://105.186.118.24:44651/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--157023fc-79be-8c0e-01ef-0000a604c952","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.34.223:37461/bin.sh","pattern":"[url:value = 'http://219.157.34.223:37461/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a493ebce-3b9c-9440-3a65-0000bbcb1699","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.192.77:38320/bin.sh","pattern":"[url:value = 'http://182.114.192.77:38320/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8879619-375c-8a79-8228-0000b346e6a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.216.179:36444/bin.sh","pattern":"[url:value = 'http://222.140.216.179:36444/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--462b2d73-e0c1-a3b8-5d62-00002e57304e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.216.179:36444/i","pattern":"[url:value = 'http://222.140.216.179:36444/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--152ea14f-2198-b1b6-6cd9-0000e47a0f21","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.23.235.69:41594/i","pattern":"[url:value = 'http://60.23.235.69:41594/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f50eeebc-88c9-dc62-f753-00001f77b14a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://146.158.4.238:41633/i","pattern":"[url:value = 'http://146.158.4.238:41633/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98b78b7a-3962-3525-441a-00002062cf1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.86.30:45927/i","pattern":"[url:value = 'http://125.40.86.30:45927/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81d200e1-51ee-e94b-2976-0000348b4c40","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.113.101.43:53440/bin.sh","pattern":"[url:value = 'http://112.113.101.43:53440/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6f9b757-0a4d-0ea0-8db5-0000f2600f9a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.45.111:57854/i","pattern":"[url:value = 'http://182.113.45.111:57854/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd595a31-75a8-0de6-7af9-0000833c963a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.34.137:57791/i","pattern":"[url:value = 'http://182.116.34.137:57791/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e83254d7-a15d-dc0e-a024-00006ab0af23","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.30.45:34814/bin.sh","pattern":"[url:value = 'http://115.57.30.45:34814/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84543a72-a87c-5242-5bad-0000eaacb280","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.119.47:53986/bin.sh","pattern":"[url:value = 'http://61.53.119.47:53986/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16cb043a-241a-d887-cf5b-0000b550fbc2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.73.196:42693/bin.sh","pattern":"[url:value = 'http://219.155.73.196:42693/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8179c3d5-c4ce-f8c4-7ec9-0000b63affe1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.113.147:53111/bin.sh","pattern":"[url:value = 'http://182.126.113.147:53111/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3c889f5-1d74-8b44-6470-000038879df6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.207.151:52550/i","pattern":"[url:value = 'http://110.38.207.151:52550/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86c45330-0047-92ba-05b4-0000dd82a886","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.34.223:37461/i","pattern":"[url:value = 'http://219.157.34.223:37461/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50a18168-ec25-eb3d-d8af-000031fbe512","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.244.13:44914/i","pattern":"[url:value = 'http://182.121.244.13:44914/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a36c6fd6-e08e-71fb-7142-0000db135694","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.227.14:47543/i","pattern":"[url:value = 'http://125.41.227.14:47543/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb0fa25c-f18e-7199-e186-00009d5e517b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.70.226.107:53300/bin.sh","pattern":"[url:value = 'http://36.70.226.107:53300/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc079a9b-3852-6c8c-9a81-000010fae530","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://118.173.224.60:39084/i","pattern":"[url:value = 'http://118.173.224.60:39084/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f368f107-b1a3-dd5e-2288-0000bff76a4e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.145.245:55982/i","pattern":"[url:value = 'http://115.63.145.245:55982/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1448ff7-aa63-6671-00b4-000089572107","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.157.219.158:39929/bin.sh","pattern":"[url:value = 'http://37.157.219.158:39929/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d5f0201-edca-4699-8d5e-00003c5601f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.30.45:34814/i","pattern":"[url:value = 'http://115.57.30.45:34814/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48ff1d3c-0c06-f536-7692-00000b69da83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.80.50:56227/i","pattern":"[url:value = 'http://123.13.80.50:56227/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba5ba162-9371-6bf3-aca5-0000f4805f8e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.6.34.92:60244/bin.sh","pattern":"[url:value = 'http://42.6.34.92:60244/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dd482b8-90d4-f71e-ee53-0000b730064f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.179.192:41888/bin.sh","pattern":"[url:value = 'http://42.239.179.192:41888/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f722d085-00e9-71c0-824c-000047d018c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.78.154:48079/i","pattern":"[url:value = 'http://123.11.78.154:48079/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7976fa3-97e4-e7fe-7be7-0000a346d7df","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.101.72:54475/i","pattern":"[url:value = 'http://27.37.101.72:54475/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67a1ff41-e370-d99e-18c9-0000b7dbcc32","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.36:53831/i","pattern":"[url:value = 'http://210.208.111.36:53831/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--447d95b8-c2de-28b1-6a0d-00001db9999c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.118.246.94:39103/bin.sh","pattern":"[url:value = 'http://182.118.246.94:39103/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf13f736-70b3-ae01-2549-00000bd3eae7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.157.219.158:39929/i","pattern":"[url:value = 'http://37.157.219.158:39929/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2595ed0-712b-04e7-813b-00004f70e9a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.20.248:59087/i","pattern":"[url:value = 'http://219.156.20.248:59087/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57bcd3eb-094a-45f9-3fb5-0000390313c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.74.117:55662/i","pattern":"[url:value = 'http://61.53.74.117:55662/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01083f6e-98d4-3076-319d-0000e03a018b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.66.165:50850/bin.sh","pattern":"[url:value = 'http://125.45.66.165:50850/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e480807-3974-886b-81de-000041e7108f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.66.165:50850/i","pattern":"[url:value = 'http://125.45.66.165:50850/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a10e85b-be8f-0f2b-37b8-00001f8fed35","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://220.177.11.228:55723/i","pattern":"[url:value = 'http://220.177.11.228:55723/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8ab6cab-e4d4-1e81-78c3-0000a917a94c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.144.161:35460/bin.sh","pattern":"[url:value = 'http://120.28.144.161:35460/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af82da97-5cdd-6206-a6ad-0000744b24ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://118.173.224.60:39084/bin.sh","pattern":"[url:value = 'http://118.173.224.60:39084/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a43f8dd4-f8f8-8be1-a89f-000046bd13dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.87.163.211:35892/i","pattern":"[url:value = 'http://42.87.163.211:35892/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe50a37c-84ae-c3b5-9638-000047dc6aba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.26.83.196:34302/i","pattern":"[url:value = 'http://117.26.83.196:34302/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--108c5658-d757-c74e-1a7f-00009e360f6f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.87.163.211:35892/bin.sh","pattern":"[url:value = 'http://42.87.163.211:35892/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f95acf24-4089-a049-421e-00000ceed800","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.110.220:49686/i","pattern":"[url:value = 'http://61.53.110.220:49686/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e5becad-0ae5-7a37-e3e8-00002ba4bf3f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.118.241.162:42966/i","pattern":"[url:value = 'http://182.118.241.162:42966/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--948cbdcf-1e6a-3ba2-437f-0000dbe08bb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.0.3:52567/i","pattern":"[url:value = 'http://115.50.0.3:52567/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2454fbdd-1dce-ed3d-55a5-0000ea694e72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.176.10.219:58446/bin.sh","pattern":"[url:value = 'http://60.176.10.219:58446/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d60c1142-497d-350c-adb3-0000dd0773ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.80.50:56227/bin.sh","pattern":"[url:value = 'http://123.13.80.50:56227/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28c5ae3c-90f6-91fe-e29f-0000028dfe2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.163:51558/bin.sh","pattern":"[url:value = 'http://46.236.65.163:51558/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e43fc18-b16b-e0b5-bfe8-0000b19f0973","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.159.43:42655/i","pattern":"[url:value = 'http://61.52.159.43:42655/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8caae4f-037d-d008-d88c-0000c4853542","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.238.18:53312/bin.sh","pattern":"[url:value = 'http://112.198.238.18:53312/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97c20e1d-34ef-00ed-7587-00000b61fb08","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.252.116:35588/bin.sh","pattern":"[url:value = 'http://222.142.252.116:35588/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e82704b3-bceb-9240-de50-0000f2087560","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.204.30:46437/i","pattern":"[url:value = 'http://123.11.204.30:46437/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d1b9b5f-5e92-d1bd-9c09-00008b46b693","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.238.18:53312/i","pattern":"[url:value = 'http://112.198.238.18:53312/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10892792-b325-20a9-909c-00004440a0c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.192.77:38320/i","pattern":"[url:value = 'http://182.114.192.77:38320/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1080435f-01e1-ad99-eeb0-0000a57ab3d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.212.173.225:35221/i","pattern":"[url:value = 'http://66.212.173.225:35221/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d6afc56-e5a5-01bc-59f3-000089293126","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.53.155:43350/i","pattern":"[url:value = 'http://125.44.53.155:43350/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28acbc61-1d17-0361-a5b4-00002a73eae6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.110.220:49686/bin.sh","pattern":"[url:value = 'http://61.53.110.220:49686/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28a8fc15-e772-b2da-d03e-00008e9fa176","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.146.252:57987/bin.sh","pattern":"[url:value = 'http://115.48.146.252:57987/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48ff527d-44b2-dc72-5795-00000dd06ebe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.41.95:38149/i","pattern":"[url:value = 'http://123.9.41.95:38149/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfaf264b-a490-75d3-eb19-00000d0e1a0d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.255.46:55570/bin.sh","pattern":"[url:value = 'http://125.42.255.46:55570/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81a79912-7eee-e21d-18ab-000003e53529","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.220:46346/bin.sh","pattern":"[url:value = 'http://210.208.111.220:46346/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94cb6b3a-82da-e4ce-6bbb-000057358c28","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.239.221.126:36365/i","pattern":"[url:value = 'http://113.239.221.126:36365/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19f7dcfd-2eb3-82a6-1a53-0000473e4898","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.239.221.126:36365/bin.sh","pattern":"[url:value = 'http://113.239.221.126:36365/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28a14ec2-8158-856b-3074-0000a976f65d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.147.94.37:45880/i","pattern":"[url:value = 'http://175.147.94.37:45880/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e224da17-d3b0-9aad-7a53-0000aacb39fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://84.53.221.6:61495/bin.sh","pattern":"[url:value = 'http://84.53.221.6:61495/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--619dfa6d-bdc2-6dc7-ba37-0000d494fb72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.252.116:35588/i","pattern":"[url:value = 'http://222.142.252.116:35588/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97a7f7bc-40be-474e-bf57-00002b7d037c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.174.110.158:47459/i","pattern":"[url:value = 'http://175.174.110.158:47459/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46a8404d-cc3f-2345-68ec-0000a4403fa4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.61.242.68:50097/bin.sh","pattern":"[url:value = 'http://115.61.242.68:50097/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebda5098-e2af-d58a-237b-0000dbcbca93","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.113.147:53111/i","pattern":"[url:value = 'http://182.126.113.147:53111/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8e1d626-42eb-363d-f81e-0000c8d9cf43","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://121.231.77.43:2715/i","pattern":"[url:value = 'http://121.231.77.43:2715/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdc48044-64c1-0490-2468-0000246ffe9d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.66.162:41960/i","pattern":"[url:value = 'http://182.121.66.162:41960/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62a63606-48c3-18e4-557e-00004652aed6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.61.242.68:50097/i","pattern":"[url:value = 'http://115.61.242.68:50097/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76fdbdcc-29ff-020e-5c3b-0000fea474a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.212.190:40164/i","pattern":"[url:value = 'http://120.84.212.190:40164/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f5c6d32-6a29-f446-8219-000061177c5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.159.233:46480/bin.sh","pattern":"[url:value = 'http://222.140.159.233:46480/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fd4212d-724c-e628-d377-0000c9c293bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.113.101.43:53440/i","pattern":"[url:value = 'http://112.113.101.43:53440/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6521ea5c-53c2-3026-d858-000079289927","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.66.143:59123/bin.sh","pattern":"[url:value = 'http://115.56.66.143:59123/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b67e3659-dcd5-cfc1-efe5-0000a9ba9d69","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.239.253.241:39307/i","pattern":"[url:value = 'http://113.239.253.241:39307/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ab11b30-01df-ff3a-e6b2-0000c54de824","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.78.26.151:57370/bin.sh","pattern":"[url:value = 'http://39.78.26.151:57370/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66fdb1a5-5dba-4630-17cf-00001517cb1b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.212.135:36545/i","pattern":"[url:value = 'http://120.84.212.135:36545/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba27a654-1f99-12de-22ba-0000c2946d7c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.174.110.158:47459/bin.sh","pattern":"[url:value = 'http://175.174.110.158:47459/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e1b2897-6e5c-3746-9729-0000db128cf3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.37.12:47625/i","pattern":"[url:value = 'http://115.48.37.12:47625/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86f10a15-b616-1d13-aa5b-0000dece0eb3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.75.82:45777/bin.sh","pattern":"[url:value = 'http://110.36.75.82:45777/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcb30da8-04b9-6652-e9e4-0000c4dbd5d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.72.148:43605/i","pattern":"[url:value = 'http://125.41.72.148:43605/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24a19203-8853-c377-46b9-000014968035","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.228.208.46:56903/bin.sh","pattern":"[url:value = 'http://113.228.208.46:56903/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e0eda54-f5ab-8cd1-403b-000003acc35e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.75.82:45777/i","pattern":"[url:value = 'http://110.36.75.82:45777/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3ec170c-85f2-1d9d-1801-0000515396bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.168.51:58015/i","pattern":"[url:value = 'http://182.121.168.51:58015/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac8e75be-6969-5f75-98a4-000063feb58c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.194.25.221:36557/bin.sh","pattern":"[url:value = 'http://45.194.25.221:36557/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--448411aa-526f-9d27-81d4-00009995f975","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.93.187:38525/i","pattern":"[url:value = 'http://163.142.93.187:38525/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e4533d5-0e16-5c67-a2bc-00008de962c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.194.25.221:36557/i","pattern":"[url:value = 'http://45.194.25.221:36557/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--167238fb-7e8c-32f1-ed57-0000e4737562","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.89.94.52:43636/bin.sh","pattern":"[url:value = 'http://39.89.94.52:43636/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad96e195-801d-3ebe-e218-000051a7cbc4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://212.164.115.235:52521/bin.sh","pattern":"[url:value = 'http://212.164.115.235:52521/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bdcbd07-bcec-ecbd-c3de-00002f371d7a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.89.94.52:43636/i","pattern":"[url:value = 'http://39.89.94.52:43636/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34ffe2ab-7606-3c4c-616b-0000601189f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.2:53561/i","pattern":"[url:value = 'http://210.208.111.2:53561/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7461b67-fdab-7edc-c714-00008f67b7e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.15.73:52944/i","pattern":"[url:value = 'http://182.119.15.73:52944/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35843c0c-5f06-d000-8f52-0000644a8239","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://212.164.115.235:52521/i","pattern":"[url:value = 'http://212.164.115.235:52521/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b199f08-b467-1bef-ecc8-000068d72a48","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.226.200.149:34560/bin.sh","pattern":"[url:value = 'http://112.226.200.149:34560/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08dd596e-d8da-f344-82c1-00002524ebf8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.226.200.149:34560/i","pattern":"[url:value = 'http://112.226.200.149:34560/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6594a6fd-a49f-9e01-cdb0-00004655e97a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.17.244:47351/i","pattern":"[url:value = 'http://123.12.17.244:47351/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac28673c-53fe-71ff-86b5-0000c60e0c6c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_ebb368c7ee29bd5e.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_ebb368c7ee29bd5e.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e53fd8bf-f53e-e8bf-b90c-0000c5f39e4c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.54.109/etc.exe","pattern":"[url:value = 'http://178.16.54.109/etc.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5cc80f0-96a2-bc8b-6efa-0000e8e3205b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.146.54.164:35591/bin.sh","pattern":"[url:value = 'http://175.146.54.164:35591/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7273a15-d5de-4fad-c01a-00006e384fd0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.8.145:37109/bin.sh","pattern":"[url:value = 'http://115.63.8.145:37109/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac82399e-1f44-58b3-009b-00000ec9bf4e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.53.241.188:49853/bin.sh","pattern":"[url:value = 'http://42.53.241.188:49853/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b3b4c0e-c0d6-f3a2-8db0-0000132f81f2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.37.12:47625/bin.sh","pattern":"[url:value = 'http://115.48.37.12:47625/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce3efcb7-caeb-56cc-906b-00004d0f1eef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.72.148:43605/bin.sh","pattern":"[url:value = 'http://125.41.72.148:43605/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ae58635-3ed4-0a2b-ad62-00006b6f4bc5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.8.145:37109/i","pattern":"[url:value = 'http://115.63.8.145:37109/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4e3223a-a745-9bea-a894-0000433bd0de","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.22.9:38226/i","pattern":"[url:value = 'http://222.141.22.9:38226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8a5da49-dfd5-ca16-94fe-0000565689fb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.2:53561/bin.sh","pattern":"[url:value = 'http://210.208.111.2:53561/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5517ccf-dae1-1650-9653-0000f163c3ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_d91af7a531637b1f.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_d91af7a531637b1f.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f80b7c69-6ca7-f5d6-518e-0000a7285a8b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_9e042abf89f49e45.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_9e042abf89f49e45.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fd439fc-1d52-e440-f247-0000c7925452","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_eead3d0c419daff9.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_eead3d0c419daff9.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beb3d788-a378-a997-8b20-00008741bec6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.101.72:54475/bin.sh","pattern":"[url:value = 'http://27.37.101.72:54475/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca01b384-ff41-05c4-a02f-0000aaa53bd5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.157.219:53297/bin.sh","pattern":"[url:value = 'http://175.148.157.219:53297/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f97a3744-8779-3bc8-9d75-0000a332585d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.157.219:53297/i","pattern":"[url:value = 'http://175.148.157.219:53297/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c87b241-cbed-7a90-d501-00002001787c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.165.91.36:41931/i","pattern":"[url:value = 'http://119.165.91.36:41931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef65f483-3f31-9fd2-ce01-00005a0d51f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.189.155.7:34948/i","pattern":"[url:value = 'http://119.189.155.7:34948/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cca8e376-2db7-fc2e-a507-00000954da75","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.sh4","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9628aae4-0be1-6ea0-8d4a-00003bc0c1dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.arc","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--944830ef-bd36-434c-84ef-0000f1892df6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.x86","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35f6bd07-19a3-4295-bf13-0000f48cd4c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.x86_64","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdc308eb-8a24-e2c2-3a99-00009b756350","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.arm5","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbbcbf78-e50f-71ff-a22e-00000f1e312d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.spc","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9fa0121-8856-f022-7098-0000898a4383","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.ppc","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53cd69c7-f4cf-f072-7334-0000317cabdb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.arm7","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--719087e3-9966-a809-6d94-0000db1fb6ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.arm","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb9947ad-03b8-ce45-4bde-0000133d7974","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.m68k","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5121fdb3-0b0b-cbdd-2a8a-0000de158a18","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.i686","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87b5737b-94a0-4d10-d628-000013cbafae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.mips","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3267b5b2-439c-7025-a831-000078c8c1e4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.mpsl","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24ca5951-e7c0-1834-6c3f-000089c0ccbe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.arm6","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af86d14c-ae34-e03a-0f39-0000110ee3ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.107.186/clp.exe","pattern":"[url:value = 'http://196.251.107.186/clp.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f629fec8-afe0-cafc-a5fd-0000a347d6ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.77.246.150/get.sh","pattern":"[url:value = 'http://103.77.246.150/get.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c80426e6-a70e-2811-8403-00009daaae49","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.107.186/zs/zs64.exe","pattern":"[url:value = 'http://196.251.107.186/zs/zs64.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48cac3fb-2206-8709-93b5-0000d68176f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://purbalinggamandiri.com/3.exe","pattern":"[url:value = 'https://purbalinggamandiri.com/3.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b00511b1-af4f-f1c1-f8c1-0000135906a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://purbalinggamandiri.com/144.exe","pattern":"[url:value = 'https://purbalinggamandiri.com/144.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68d08568-0ba7-2d8a-c57d-000072956184","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.8/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.8/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f01cff90-e7f2-f7bc-730d-00008e405c93","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.8/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.8/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--884bc92e-acac-b516-d3de-00003d93dad3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://193.26.115.28/bin/support.client.exe","pattern":"[url:value = 'https://193.26.115.28/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81773290-8810-eb0d-9392-00002a744d31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://193.26.115.28/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://193.26.115.28/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3174c9a-3933-9486-2d93-0000dbedfdf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.107/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.107/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22c8009d-d76e-5122-e89e-0000940224ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.107/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.107/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35378c31-8c64-4728-aaf7-0000fe54b874","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.88.136.194:37137/i","pattern":"[url:value = 'http://36.88.136.194:37137/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e4d9371-b793-bc2a-0570-0000f344a313","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.88.136.194:37137/bin.sh","pattern":"[url:value = 'http://36.88.136.194:37137/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf0bdf04-dda8-4eb2-c18c-0000620dede5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://104.249.10.175/bin/support.client.exe","pattern":"[url:value = 'http://104.249.10.175/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--323edc9f-b3d3-4f51-81bf-0000eed52de9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://104.249.10.175/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://104.249.10.175/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdc87503-7079-4cf9-ce10-000031c73c3b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.98/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.98/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--633b7b8a-046b-a6c3-ae1e-000065149282","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.25/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.25/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64c95abc-13e2-0881-8811-00009ade8d74","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.25/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.25/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4beab2d-e0db-6cf9-4545-0000a5c96b10","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.80.97:57819/i","pattern":"[url:value = 'http://182.126.80.97:57819/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37e9b468-c670-ae0b-0d1b-0000ebcdee61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://104.249.10.248/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://104.249.10.248/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18ca2e31-d29b-1164-da00-0000a169e893","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://104.249.10.248/bin/support.client.exe","pattern":"[url:value = 'https://104.249.10.248/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8975431-6dea-1582-a671-000061635446","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.141/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.141/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d64f2279-ea16-48c7-5821-0000ee870c86","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.141/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.141/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30efdb44-9b51-2ecb-2129-0000d19c83bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.162/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.162/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac0cb30b-90e2-3364-f0fd-00003e7d1bb3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.162/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.162/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35260f9a-40c5-8ea9-f33e-00005167e18f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.219.69:59860/bin.sh","pattern":"[url:value = 'http://182.113.219.69:59860/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdbe7d2a-d356-ecf2-1d34-000077e41f65","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.219.69:59860/i","pattern":"[url:value = 'http://182.113.219.69:59860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c3c51d1-59a6-2a32-defe-0000f4f20aa7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.74/Services.apk","pattern":"[url:value = 'http://94.154.43.74/Services.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96757f9d-73b1-362f-2b75-000089758e11","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.74/persist.arm7","pattern":"[url:value = 'http://94.154.43.74/persist.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6703b685-8d7c-99b8-79b7-0000381ec426","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.59.237.57:55244/bin.sh","pattern":"[url:value = 'http://42.59.237.57:55244/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eddbd29-2ecc-ae11-27a3-00006ae34603","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.196.132:39255/i","pattern":"[url:value = 'http://182.114.196.132:39255/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--823e2ff9-3322-6488-6a60-00009d1e28b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.237.71.75:38677/bin.sh","pattern":"[url:value = 'http://113.237.71.75:38677/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41401d4b-86f9-85bc-ed33-000001090a42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.237.71.75:38677/i","pattern":"[url:value = 'http://113.237.71.75:38677/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c277c10-d4f2-b4dc-e808-0000ced06543","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.110.9:42389/i","pattern":"[url:value = 'http://182.127.110.9:42389/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c3c33b0-e80e-92bf-b9a9-0000ea2ca255","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.59.37.62:48034/i","pattern":"[url:value = 'http://115.59.37.62:48034/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--143637ec-9ebc-ca63-94f6-00000b3359d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.196.132:39255/bin.sh","pattern":"[url:value = 'http://182.114.196.132:39255/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53ec4d5e-f043-d946-9297-00007e3fd95c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.170.224.217:54350/bin.sh","pattern":"[url:value = 'http://45.170.224.217:54350/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--184daebf-da15-17a4-2eb6-0000029d50d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.170.224.217:54350/i","pattern":"[url:value = 'http://45.170.224.217:54350/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5df89fa8-ac51-f5ae-9e14-000066a2a5d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.169.99:44901/i","pattern":"[url:value = 'http://115.50.169.99:44901/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f1293e3-e85e-59df-69e8-0000f60783f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.176.45:53526/bin.sh","pattern":"[url:value = 'http://123.14.176.45:53526/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5b8846a-60b9-e5f4-1182-00002b636d0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.176.45:53526/i","pattern":"[url:value = 'http://123.14.176.45:53526/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3f0eb01-ea10-c6f6-696c-0000f583f751","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.226.250.88/onie_sh4","pattern":"[url:value = 'http://103.226.250.88/onie_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a140b488-d401-813b-b350-0000ed25251b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_sh4","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1874269-4599-37ff-0eaf-000002e38ed4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_x86_64","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d41256df-5a3b-f59c-c5cd-00006dfbbced","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_ppc","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91f170e1-823e-1924-ca8f-0000b9d344d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_m68k","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ea26e1d-922c-d07b-dd63-0000232ef11e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_arm6","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09a55e8b-e256-bce3-71fb-00009b92967b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_arm7","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c78d01d-8f60-0bc9-c99b-00003f6e4980","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_arm","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7ab3fa7-b3d8-0100-8d0c-0000319b5ef0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_arm5","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9a06711-d328-b992-b8d4-000015f8d298","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_x86","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13c33b67-9b69-927a-85ae-00008731e42a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.226.250.88/onie.sh","pattern":"[url:value = 'http://103.226.250.88/onie.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--680f82fe-accd-f7f3-8e1c-0000d226fc44","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_mpsl","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dddd4437-d5fe-4ab6-edae-0000b925920e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_mips","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee3e8198-ad22-dcc7-8d2e-0000e48f18a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.156.24:55996/i","pattern":"[url:value = 'http://175.148.156.24:55996/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52e7980f-4050-f620-4bb6-000078dc7508","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.armv6l","pattern":"[url:value = 'http://176.65.139.233/daredevil.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79cacbcc-9ab4-41bc-db2f-00003f7c0fd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.armv5l","pattern":"[url:value = 'http://176.65.139.233/daredevil.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11adac4a-9edc-ab0f-bd9e-000023ae6119","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.powerpc","pattern":"[url:value = 'http://176.65.139.233/daredevil.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c4a394e-62fd-ef1e-1094-000016ffc0cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.sh4","pattern":"[url:value = 'http://176.65.139.233/daredevil.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a5da7be-cff2-592e-8826-0000cf2a91f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.x86_64","pattern":"[url:value = 'http://176.65.139.233/daredevil.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--073bbdd9-6efa-3eff-c511-0000964e72c7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.mipsel","pattern":"[url:value = 'http://176.65.139.233/daredevil.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bfca94e-b21a-91b7-8c44-000045bc5cb8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.armv7l","pattern":"[url:value = 'http://176.65.139.233/daredevil.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--464edc8b-5cfd-befc-3696-0000a5ff570d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.sparc","pattern":"[url:value = 'http://176.65.139.233/daredevil.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60d1fa8d-9674-e8db-9374-0000021c2668","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.armv4l","pattern":"[url:value = 'http://176.65.139.233/daredevil.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afe7293f-8f63-4ca4-6779-0000a1690f9c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.mips","pattern":"[url:value = 'http://176.65.139.233/daredevil.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3cb1de9-d71f-7c6d-aa46-0000a19fd946","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.m68k","pattern":"[url:value = 'http://176.65.139.233/daredevil.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6ca70dc-5e99-5946-e587-0000246bdb64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.arc","pattern":"[url:value = 'http://176.65.139.233/daredevil.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5a369f4-2eb1-2565-adb5-0000bd5bbcfb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.mipsrouter","pattern":"[url:value = 'http://176.65.139.233/daredevil.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7af77399-5dd1-11c1-6bb6-0000217f8b21","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.i486","pattern":"[url:value = 'http://176.65.139.233/daredevil.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--024724a8-6211-4479-7d61-00003a4d7ce1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/a.sh","pattern":"[url:value = 'http://176.65.139.233/a.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dcb422b-b0db-2c12-f103-00000e97da9d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.30.16:36416/bin.sh","pattern":"[url:value = 'http://42.230.30.16:36416/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84f6ae85-04e5-a009-7280-000077d25a0f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.53.241.188:49853/i","pattern":"[url:value = 'http://42.53.241.188:49853/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d1ed4c2-d484-b406-16c2-000079063ac5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://124.94.194.151:33197/bin.sh","pattern":"[url:value = 'http://124.94.194.151:33197/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34983501-d172-f1b8-ade4-0000a951f66d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/8722997249/utRRFWX.exe","pattern":"[url:value = 'http://62.60.226.140/files/8722997249/utRRFWX.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3716d1ea-b7e1-09cb-1686-00003cf451e0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://192.162.199.149/uploads/cl1786993325592.exe","pattern":"[url:value = 'http://192.162.199.149/uploads/cl1786993325592.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e669466-3dea-9b68-35b0-000009d079d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://180.191.122.115:57936/bin.sh","pattern":"[url:value = 'http://180.191.122.115:57936/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfd49685-63f5-3b00-978a-0000b52da72b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://180.191.122.115:57936/i","pattern":"[url:value = 'http://180.191.122.115:57936/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--368c1f7b-dc66-0e88-558a-0000858603bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.51:48541/bin.sh","pattern":"[url:value = 'http://210.208.110.51:48541/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b62c3a5-de3c-24d1-2098-000068ae5e97","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.189.139.234:49221/bin.sh","pattern":"[url:value = 'http://123.189.139.234:49221/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0702f57f-d0d8-694e-1b7a-00002c1e1e10","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.52.238:45439/bin.sh","pattern":"[url:value = 'http://125.44.52.238:45439/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff4521ab-3944-5ae4-f2c0-0000ab72572c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://14.188.143.100:53340/i","pattern":"[url:value = 'http://14.188.143.100:53340/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a73f4b7-df88-ff4f-5a55-00008dbba94e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.218.53:49708/i","pattern":"[url:value = 'http://42.230.218.53:49708/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c207be20-17d3-c698-76bf-000028191519","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.150.119:50908/i","pattern":"[url:value = 'http://115.48.150.119:50908/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c8ca9df-e549-6bca-be3b-0000e968ff34","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.51:48541/i","pattern":"[url:value = 'http://210.208.110.51:48541/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b8c8f9c-cb49-4ac2-dcaf-0000586a4f3e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.52.238:45439/i","pattern":"[url:value = 'http://125.44.52.238:45439/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--112f5ee5-1af2-ea56-6fb0-0000d4b61a77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/8714097194/VicVgdL.exe","pattern":"[url:value = 'http://62.60.226.140/files/8714097194/VicVgdL.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc6fd406-91c7-2699-e0d2-0000c8a24532","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.189.139.234:49221/i","pattern":"[url:value = 'http://123.189.139.234:49221/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74ee2dd8-92f5-c4d7-f9b5-00001074b4c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.76.70:54885/i","pattern":"[url:value = 'http://182.117.76.70:54885/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf571c83-a129-e431-be84-0000047d79c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.18.25.174:34688/bin.sh","pattern":"[url:value = 'http://60.18.25.174:34688/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--799c65a1-7908-2a0f-7060-0000cdff320d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://154.90.70.23/y","pattern":"[url:value = 'http://154.90.70.23/y']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58c3fe37-d8d4-aca8-3634-00005d00e9da","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.36.197.26:60794/bin.sh","pattern":"[url:value = 'http://36.36.197.26:60794/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0c70e69-ec4d-fe25-3552-000028f3cf3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.83.90:41636/bin.sh","pattern":"[url:value = 'http://123.13.83.90:41636/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--270adbb9-c494-d7c8-2016-0000bce075dc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.6.146:37581/bin.sh","pattern":"[url:value = 'http://115.50.6.146:37581/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2d1bfdc-0ec9-89bf-af8a-0000e26cd91d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.83.90:41636/i","pattern":"[url:value = 'http://123.13.83.90:41636/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81efb0d1-bdf8-9280-de5c-0000ac4d4b79","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.18.25.174:34688/i","pattern":"[url:value = 'http://60.18.25.174:34688/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66db52aa-7a8c-6187-6704-0000b915a9f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.101.5:47999/i","pattern":"[url:value = 'http://42.224.101.5:47999/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79fa513f-11dc-f399-7e76-00002589906d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.36.124:52809/bin.sh","pattern":"[url:value = 'http://42.235.36.124:52809/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef1cb75c-8fce-3985-e029-00002e55f6a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.6.146:37581/i","pattern":"[url:value = 'http://115.50.6.146:37581/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6b73513-23f0-73ba-e5f9-00001d22bcd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://179.108.89.220:33758/bin.sh","pattern":"[url:value = 'http://179.108.89.220:33758/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85b39b13-8eac-7954-d7a6-00002acbe9e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.137.195.76:33907/bin.sh","pattern":"[url:value = 'http://61.137.195.76:33907/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9377d5b1-a4c0-f7f4-f07d-000002c404df","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.84.167:36341/bin.sh","pattern":"[url:value = 'http://115.57.84.167:36341/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ff189c4-475a-1ecc-be20-0000422b9ae5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.84.167:36341/i","pattern":"[url:value = 'http://115.57.84.167:36341/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88a9dafc-4aeb-6546-4845-00009c75f94b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.204.195.189:48250/bin.sh","pattern":"[url:value = 'http://27.204.195.189:48250/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e027f2e4-8083-d54f-0c0c-0000d91d0b66","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.62.179:56519/i","pattern":"[url:value = 'http://219.156.62.179:56519/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04d126dd-6960-eb36-3914-0000432d82af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.62.179:56519/bin.sh","pattern":"[url:value = 'http://219.156.62.179:56519/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d3ba277-a28c-63e0-7e80-000088f20c49","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.204.195.189:48250/i","pattern":"[url:value = 'http://27.204.195.189:48250/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c309bbf1-cd22-be0a-3c36-00003e9d935d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://179.108.89.220:33758/i","pattern":"[url:value = 'http://179.108.89.220:33758/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f106c33f-53c3-9225-2e1c-0000d2f5c64a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.131.167.151:34514/i","pattern":"[url:value = 'http://124.131.167.151:34514/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56798f83-85d3-651b-3086-000082c7ad3d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.150.119:50908/bin.sh","pattern":"[url:value = 'http://115.48.150.119:50908/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76299329-309e-01b3-0ef6-0000db347902","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.178.37:40893/i","pattern":"[url:value = 'http://61.52.178.37:40893/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb701616-8561-3155-d770-0000a0405e3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_952a4ed2428c675f.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_952a4ed2428c675f.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa4c6cbc-41ce-9498-c3e7-00008e106b30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.225.178.134:49781/i","pattern":"[url:value = 'http://105.225.178.134:49781/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57b0ba4d-e660-a288-268e-0000597faed4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.154.116:41466/bin.sh","pattern":"[url:value = 'http://123.12.154.116:41466/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e9dc022-fda6-0241-6b9e-00008afbefa9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.6.168.74:46806/i","pattern":"[url:value = 'http://124.6.168.74:46806/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ea2d499-536d-fc1a-e5e5-0000db380440","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.154.116:41466/i","pattern":"[url:value = 'http://123.12.154.116:41466/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73332173-81f9-e239-49fd-0000918ee721","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.197.166:47521/bin.sh","pattern":"[url:value = 'http://42.224.197.166:47521/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9726233-e392-f828-41f5-00003b9b07ab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.197.166:47521/i","pattern":"[url:value = 'http://42.224.197.166:47521/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b9ca964-9765-bc97-7c99-00003dd4fea6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.221.38.148:40790/i","pattern":"[url:value = 'http://113.221.38.148:40790/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50e834aa-fff6-deb9-8f2f-0000356204f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.150.250.245:59676/bin.sh","pattern":"[url:value = 'http://175.150.250.245:59676/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ee07809-5d75-b98f-7e65-0000bc4b6fb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.68.136:45066/i","pattern":"[url:value = 'http://182.117.68.136:45066/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb29f73a-d073-e4f8-b300-0000c4c5ca35","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://thu-iphone-07.cfd/TispciphraLoader.exe","pattern":"[url:value = 'https://thu-iphone-07.cfd/TispciphraLoader.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--292d02e8-55b5-2095-6a5b-0000246efa68","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.150.250.245:59676/i","pattern":"[url:value = 'http://175.150.250.245:59676/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3435b3fc-1aef-5abb-dff0-0000d1f3f676","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.190.85.135:37478/bin.sh","pattern":"[url:value = 'http://180.190.85.135:37478/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7015996-63fa-c1a2-dfaf-0000119657b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.195.226:55894/i","pattern":"[url:value = 'http://219.155.195.226:55894/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e134b516-e5d5-8be5-1ec0-000054db34c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/arc","pattern":"[url:value = 'http://45.133.74.161/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3542f1d-6de6-0455-8347-00009e92d8ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/x86","pattern":"[url:value = 'http://45.133.74.161/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02e5729c-5254-c36a-db44-0000cd1609bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/i686","pattern":"[url:value = 'http://45.133.74.161/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b677bad-0ea2-e87f-0894-00003acbdf40","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/pay.xml","pattern":"[url:value = 'http://45.133.74.161/pay.xml']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5aed481f-e7a9-962b-a24b-00000517fa71","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/x86_64","pattern":"[url:value = 'http://45.133.74.161/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--770ed67e-123b-efda-f60f-00009ac34f1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/arm6","pattern":"[url:value = 'http://45.133.74.161/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--068c9811-b796-01f5-681d-0000b40443f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/arm","pattern":"[url:value = 'http://45.133.74.161/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cca0a08a-6b0d-f178-7548-00006005c435","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/spc","pattern":"[url:value = 'http://45.133.74.161/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0009e6e8-b4d3-d94f-a21b-0000227f2878","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/arm7","pattern":"[url:value = 'http://45.133.74.161/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77a4e8c4-e1ef-ee07-725a-000025cc6550","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/persist.arm7","pattern":"[url:value = 'http://45.133.74.161/persist.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d471fc54-6760-96ce-3b1d-000000c82c0d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/mips","pattern":"[url:value = 'http://45.133.74.161/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61a33a9d-8e3a-d713-4169-00006bcb4247","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/mpsl","pattern":"[url:value = 'http://45.133.74.161/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--985dc882-908a-cf95-d130-0000003efad7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/m68k","pattern":"[url:value = 'http://45.133.74.161/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee0787c4-170a-55ce-b462-00008876e0f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/arm5","pattern":"[url:value = 'http://45.133.74.161/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbb4fc84-7976-abde-4a4d-0000664f2f6d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/sh4","pattern":"[url:value = 'http://45.133.74.161/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cee61ed3-a1a9-9e5d-6b24-0000e691b69b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/ppc","pattern":"[url:value = 'http://45.133.74.161/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b530c37f-bfc4-fb82-2964-00006dd5de57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.190.85.135:37478/i","pattern":"[url:value = 'http://180.190.85.135:37478/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dedc688-0b8b-a764-9893-0000584be1e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/Services.apk","pattern":"[url:value = 'http://45.133.74.161/Services.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bba2d757-75dc-530c-e87b-00006b24ec3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.146.92.46:52495/i","pattern":"[url:value = 'http://117.146.92.46:52495/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05d38c62-d000-5541-36ee-000037c90ecc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://162.255.251.91:37737/bin.sh","pattern":"[url:value = 'http://162.255.251.91:37737/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95643844-ae20-2911-f0cc-0000dea5799d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.76.70:54885/bin.sh","pattern":"[url:value = 'http://182.117.76.70:54885/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82485bef-de6d-c041-f4af-000077809f8c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.156.30:49683/i","pattern":"[url:value = 'http://115.56.156.30:49683/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d416d46-23ce-8443-abef-000051e9d00d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.8.180:46594/bin.sh","pattern":"[url:value = 'http://221.15.8.180:46594/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cb18424-ebe1-8010-a898-000028bb75eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.8.180:46594/i","pattern":"[url:value = 'http://221.15.8.180:46594/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97c41e55-2b62-6753-1691-0000d6499014","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.72.60:34472/bin.sh","pattern":"[url:value = 'http://123.11.72.60:34472/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1132202-b89b-4ee9-7708-0000d4fe968f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://162.255.251.91:37737/i","pattern":"[url:value = 'http://162.255.251.91:37737/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50480f4c-face-b62c-d319-00007269e437","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.72.60:34472/i","pattern":"[url:value = 'http://123.11.72.60:34472/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d717cd86-b5f8-f6d3-3a6d-0000ec490e8f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.237.34.160:35437/i","pattern":"[url:value = 'http://42.237.34.160:35437/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae573e15-799f-de6a-a2c1-00005a51fbb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.119.188:36580/i","pattern":"[url:value = 'http://182.126.119.188:36580/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5f12b56-9846-42af-2dc1-0000208d288a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.179.242:55011/bin.sh","pattern":"[url:value = 'http://182.117.179.242:55011/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c2b82ca-583e-d77e-84f4-0000cd4755cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.179.242:55011/i","pattern":"[url:value = 'http://182.117.179.242:55011/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6820f255-14ae-0753-f302-000083e50a6a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.239.2:34176/i","pattern":"[url:value = 'http://112.198.239.2:34176/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d0a153c-ebb0-62a0-5ae1-00000e67561d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.21:54646/i","pattern":"[url:value = 'http://210.208.110.21:54646/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99e1e527-8b1f-97ab-e66f-00003d70c015","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://brandtinoda.com/wp-content/uploads/2026/ovdbot.exe","pattern":"[url:value = 'https://brandtinoda.com/wp-content/uploads/2026/ovdbot.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac6ac4eb-4ce5-d251-100c-00005330e04f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.38.203.20:51099/i","pattern":"[url:value = 'http://39.38.203.20:51099/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bbe959b-6bcb-c92f-5212-000025dff200","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_27fd3a19e4e1e1b6.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_27fd3a19e4e1e1b6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d58a6a58-1de6-d3c9-4a45-000004a6d360","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_1d2e34021664fd28.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_1d2e34021664fd28.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47b566e4-d3f3-bb31-e02b-0000d231b6b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://www.mixierealty.com/wp-content/bin.exe","pattern":"[url:value = 'https://www.mixierealty.com/wp-content/bin.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d50c586-e12f-4209-5a37-0000cc2850ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://bserail.com/cabin/Diocle.emz","pattern":"[url:value = 'http://bserail.com/cabin/Diocle.emz']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c25aa73f-f757-cbbc-2b0d-0000b1b97505","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_5607a34d16e59914.cmd","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_5607a34d16e59914.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--836aeee0-aa45-677c-6e6b-0000300ec3a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://app.faster-cdn-hk.click/Telegram_v12.8.3.apk","pattern":"[url:value = 'https://app.faster-cdn-hk.click/Telegram_v12.8.3.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05b6da97-1bc5-1bef-f350-000055ffd0f2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/huawei","pattern":"[url:value = 'http://31.77.227.102/huawei']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7876738e-9294-3e01-72ed-0000a2a98d60","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.4.243.157:37617/bin.sh","pattern":"[url:value = 'http://123.4.243.157:37617/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--302a019a-a1f2-a2b3-051a-0000c652802f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.arm6","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ab83b64-fa83-9141-1733-000042a0f28e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.spc","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58fe853d-6d6f-b007-5c10-0000c4348020","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.ppc","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2687ed79-6d08-003f-0d1e-0000375a8d75","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.mpsl","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dac676a-6ff9-27c4-b249-000044ea19d6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.sh4","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9235020-62a6-3014-3e76-0000d4e72fc1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.arm5","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df791f66-a633-19ed-fe30-00005caf35e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.m68k","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--472d310c-831e-1b15-74ba-00007eeee74a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.arm7","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2298f84-2698-51c1-792d-0000ece3eae8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.spc","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fdb6caa-b83f-a959-d167-0000f8d0b290","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.m68k","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--098123ec-d84d-4309-f6cd-00007098a8b4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.arm5","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d60b66c2-3c26-c2c7-8987-0000c22812ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.x86_64","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e78f42c0-e348-bfd5-de7b-0000da91603f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.arm7","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3805b71f-29d2-3cd9-2128-000038e26d2b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.arm","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86259eb5-eeeb-5675-3559-000093250a00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.mpsl","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--853dd38a-ede5-d954-a46c-0000eaa901b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.sh4","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dddd0013-89bd-ffe6-e161-00001274f633","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.x86","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f06f31dd-c31c-52f2-afdd-00006a779846","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.ppc","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90887256-076a-896d-bf81-0000622d075a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.arm6","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33f7587c-b88f-0074-ef19-0000f826644a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.mips","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c85526f7-cb9d-dacc-ff59-00009c22066c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.aarch64","pattern":"[url:value = 'http://31.77.227.119/iran.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ce00a23-ca61-e3fc-fb94-00009498b779","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.powerpc","pattern":"[url:value = 'http://31.77.227.119/iran.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--429021c6-aea2-115b-58ea-00001dc429b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.mipsel","pattern":"[url:value = 'http://31.77.227.119/iran.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c6157d3-e85c-28ed-ef1b-0000b4f654a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.armv5l","pattern":"[url:value = 'http://31.77.227.119/iran.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cff87a98-12ea-bfee-1364-000061c0477b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.arc","pattern":"[url:value = 'http://31.77.227.119/iran.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de5f9ebc-b6ee-4dda-cf8f-00002c24a9f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.mips","pattern":"[url:value = 'http://31.77.227.119/iran.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ff63ba1-4dbb-0e3f-3cd0-000044a0ca87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.x86_64","pattern":"[url:value = 'http://31.77.227.119/iran.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--257a6692-8ba9-048a-ad85-000089967d16","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.armv4l","pattern":"[url:value = 'http://31.77.227.119/iran.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--174c0410-75bc-42e3-a5ac-0000f3562e76","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.armv6l","pattern":"[url:value = 'http://31.77.227.119/iran.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--328eb6a6-c9dd-3e52-d5dc-0000911cc357","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.sparc","pattern":"[url:value = 'http://31.77.227.119/iran.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b4fc41a-a48d-61cc-fa02-0000ac322d48","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.i486","pattern":"[url:value = 'http://31.77.227.119/iran.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9273aa6a-72a2-c0d6-c851-00002cd27f2f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.m68k","pattern":"[url:value = 'http://31.77.227.119/iran.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9578330a-080e-f4e6-1103-000053545cd3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.sh4","pattern":"[url:value = 'http://31.77.227.119/iran.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5879b237-1971-1792-28ce-00002a78b341","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.73.173:58794/bin.sh","pattern":"[url:value = 'http://115.49.73.173:58794/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9961c0a-3f6b-c042-2379-000006faabed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.2.60.14:35984/i","pattern":"[url:value = 'http://116.2.60.14:35984/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f07bad22-7c5b-77fc-4408-000013c1bdc0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.225.137.62:54095/bin.sh","pattern":"[url:value = 'http://105.225.137.62:54095/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cb7fe96-2fc3-5b6d-53e2-0000d2d26bac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.4.243.157:37617/i","pattern":"[url:value = 'http://123.4.243.157:37617/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--469a6a3c-7d5c-0042-d33d-000056cfa06b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.225.137.62:54095/i","pattern":"[url:value = 'http://105.225.137.62:54095/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c592e2d-aebf-014a-0ed2-0000dd53703d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.7.9:33286/bin.sh","pattern":"[url:value = 'http://182.119.7.9:33286/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--104bbcfd-b5e0-9a6f-4fa0-0000e014dc91","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.48.159:45678/i","pattern":"[url:value = 'http://182.117.48.159:45678/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2f349a6-ec13-394e-0708-00002c8c3364","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/unifi","pattern":"[url:value = 'http://31.77.227.102/unifi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85c18c58-28ad-a75d-8b14-0000ed8c1f42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.104.173:42207/bin.sh","pattern":"[url:value = 'http://222.139.104.173:42207/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c00fc09a-8bac-3e4b-7592-00005fb7b297","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.107.55:60545/bin.sh","pattern":"[url:value = 'http://222.141.107.55:60545/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c2c8424-b134-6ab0-c44b-0000a6059a52","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://quill-flint.com/zyeMb6slon_3VWVlkSkdiJurcyhY5cFNtchnavRnMgU/jetbrains/update","pattern":"[url:value = 'https://quill-flint.com/zyeMb6slon_3VWVlkSkdiJurcyhY5cFNtchnavRnMgU/jetbrains/update']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e07839b-c5b4-18f5-4bcd-00008bfa4cea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.201.163.254:48146/i","pattern":"[url:value = 'http://115.201.163.254:48146/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7116de6b-366e-b065-713f-00005b9b3cde","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.147.227:39666/i","pattern":"[url:value = 'http://115.48.147.227:39666/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--418ef35d-074c-ab2b-754e-0000a583e455","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.107.55:60545/i","pattern":"[url:value = 'http://222.141.107.55:60545/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81c3eb02-c099-016e-5700-00004815286c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.7.9:33286/i","pattern":"[url:value = 'http://182.119.7.9:33286/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3e1b726-b372-2d13-bb30-0000b43f958e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.104.173:42207/i","pattern":"[url:value = 'http://222.139.104.173:42207/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7e2c6bf-8437-3d87-d9ba-0000e9d00fd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.36.124:52809/i","pattern":"[url:value = 'http://42.235.36.124:52809/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0bef9eb-7f27-aef7-3b1d-0000b866be60","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.53.22.127:45156/i","pattern":"[url:value = 'http://42.53.22.127:45156/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16030dfd-b437-2e82-8f73-000065cd8acc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://109.171.67.100:40657/bin.sh","pattern":"[url:value = 'http://109.171.67.100:40657/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a701b52-0ae8-c073-49f1-0000627d05dc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.2.60.14:35984/bin.sh","pattern":"[url:value = 'http://116.2.60.14:35984/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68a8bfe4-13b0-06bf-65ab-0000e1cda417","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.208.42.53:55830/bin.sh","pattern":"[url:value = 'http://117.208.42.53:55830/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82806918-2359-b248-b647-0000bfc4e42a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.208.42.53:55830/i","pattern":"[url:value = 'http://117.208.42.53:55830/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc1c05ed-6f05-c3cb-6681-00003c3aaeab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.98.77:59901/i","pattern":"[url:value = 'http://196.189.98.77:59901/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--027fc31c-ba7b-64ee-d02c-0000c127f798","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://200.115.102.246:58251/bin.sh","pattern":"[url:value = 'http://200.115.102.246:58251/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bed5709-3bac-e918-bcb6-0000d0e62bfc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.129.132.69:54242/bin.sh","pattern":"[url:value = 'http://123.129.132.69:54242/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e62829d-8ccd-ef87-2450-0000abb4943e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://109.171.67.100:40657/i","pattern":"[url:value = 'http://109.171.67.100:40657/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15a19fcb-821f-ba68-ba4d-00003e8439b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://200.115.102.246:58251/i","pattern":"[url:value = 'http://200.115.102.246:58251/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--878085a9-9b90-fafb-615f-00008993cce8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.69.200:37705/i","pattern":"[url:value = 'http://123.11.69.200:37705/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5717dd10-bed6-d82c-dd8e-00005f15d81c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.54.31.40:58523/bin.sh","pattern":"[url:value = 'http://37.54.31.40:58523/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e11ae97c-4938-3b94-cd2f-0000db4365a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.54.31.40:58523/i","pattern":"[url:value = 'http://37.54.31.40:58523/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b16e9110-29f0-cecc-1c85-00002a00116b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.195.226:55894/bin.sh","pattern":"[url:value = 'http://219.155.195.226:55894/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afb991b7-a42f-ae85-ff96-0000ee801de7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.219.43:42748/i","pattern":"[url:value = 'http://115.55.219.43:42748/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5d08f91-055c-0596-9384-0000326fc1fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://118.34.109.121:38226/bin.sh","pattern":"[url:value = 'http://118.34.109.121:38226/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aee71ed1-29e3-fde7-0071-000092125203","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.104.55:50766/bin.sh","pattern":"[url:value = 'http://219.155.104.55:50766/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf8c80dd-660e-9663-5f6a-0000aeaab442","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.104.55:50766/i","pattern":"[url:value = 'http://219.155.104.55:50766/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4950e2ac-6bcf-dcb0-1f6b-000023372179","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.232.225.154:44359/bin.sh","pattern":"[url:value = 'http://42.232.225.154:44359/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b7dc4e1-f942-6700-f0f1-0000dd74e0f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://118.34.109.121:38226/i","pattern":"[url:value = 'http://118.34.109.121:38226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b322a444-856d-0c41-6b4d-00009cee5808","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://quill-flint.com/curl/2h0w4vtm7c/7b4cckfhojxjbrcjon.json","pattern":"[url:value = 'https://quill-flint.com/curl/2h0w4vtm7c/7b4cckfhojxjbrcjon.json']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d625fd68-2644-6e00-5459-000058a49457","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.77.246.150/mips.sh","pattern":"[url:value = 'http://103.77.246.150/mips.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9127dcbc-a935-bcb9-7fbe-0000b0b57d33","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://qorvi.pro/fdab9755.exe","pattern":"[url:value = 'https://qorvi.pro/fdab9755.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0dcfa8f-b54f-6303-56a7-00007f298e0b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.232.225.154:44359/i","pattern":"[url:value = 'http://42.232.225.154:44359/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--883c48e1-f666-4ce1-2333-00004b99463b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.68.49:47422/i","pattern":"[url:value = 'http://182.117.68.49:47422/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--656d1d86-17d8-8f83-9b00-0000dda15300","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.47.97/bins/react2shell.sh","pattern":"[url:value = 'http://91.92.47.97/bins/react2shell.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90522d7c-9dc4-6ec7-59d2-00000cd2be3d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.47.97/bins/gpon.sh","pattern":"[url:value = 'http://91.92.47.97/bins/gpon.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c0dea03-2be0-2c19-c449-00002c109c40","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.213.139.254:60192/bin.sh","pattern":"[url:value = 'http://27.213.139.254:60192/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08d7d32b-182b-171e-cb27-000072cc3d0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.16.206:50901/bin.sh","pattern":"[url:value = 'http://219.157.16.206:50901/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--268f5ace-af5c-fbbc-a01c-00005214d5ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.46.30.224:41739/bin.sh","pattern":"[url:value = 'http://38.46.30.224:41739/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--981c3cbf-716e-fcbc-64dd-00005d86d9ab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.232.8:44911/bin.sh","pattern":"[url:value = 'http://115.55.232.8:44911/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb7f8f5b-fdd4-a493-d49e-0000e83e6c1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.168.209:49180/bin.sh","pattern":"[url:value = 'http://115.50.168.209:49180/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8702be3-2482-eb90-9ac2-000079a7a7ca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.3.106:41323/bin.sh","pattern":"[url:value = 'http://125.40.3.106:41323/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6645867-4835-f7ff-ea11-00008153eab0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.195.50:44549/bin.sh","pattern":"[url:value = 'http://123.12.195.50:44549/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f05c1b2a-cc68-0e6f-ccf9-00000a47502d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.197.170:53012/i","pattern":"[url:value = 'http://221.15.197.170:53012/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b63c454-8a89-e75f-e546-0000e4eee121","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.144.141:59560/bin.sh","pattern":"[url:value = 'http://115.48.144.141:59560/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4008d2c0-d99b-877e-f423-0000d80cfc01","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.223.184:51992/i","pattern":"[url:value = 'http://115.55.223.184:51992/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad6dd48b-c781-f04a-9dd5-0000cf41ac9c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.43.84.8:46173/i","pattern":"[url:value = 'http://175.43.84.8:46173/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cebc7bf-b152-e54c-9dde-0000891786c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://189.7.90.15:36886/i","pattern":"[url:value = 'http://189.7.90.15:36886/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--952299c3-fe45-4d55-9e0f-0000127c1d95","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.213.234:43356/i","pattern":"[url:value = 'http://120.84.213.234:43356/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ed0fbf5-4da7-37cd-0044-000036e21e19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.226.58:38902/i","pattern":"[url:value = 'http://115.50.226.58:38902/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff36c843-338f-c0aa-1cc4-00004a33be17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.245.135.249:57082/i","pattern":"[url:value = 'http://117.245.135.249:57082/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--464c80da-8d77-ed90-fbef-0000308160fe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.13.132:52355/bin.sh","pattern":"[url:value = 'http://105.184.13.132:52355/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff2fc8db-3e40-da9b-461a-0000dd58ff9f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.120.90.250:37580/i","pattern":"[url:value = 'http://182.120.90.250:37580/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f21a9de1-dfb5-8b7f-3ebd-000065dbf2e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.137.199.253:52728/bin.sh","pattern":"[url:value = 'http://61.137.199.253:52728/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2ad2489-33ac-f8eb-2534-0000431d5ba0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.137.199.253:52728/i","pattern":"[url:value = 'http://61.137.199.253:52728/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--015887c1-cf11-8d51-c1d0-000075696e92","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://111.72.43.182:49489/bin.sh","pattern":"[url:value = 'http://111.72.43.182:49489/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebe5eb35-5b2e-7838-ffb8-0000bb3c5eee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.197.170:53012/bin.sh","pattern":"[url:value = 'http://221.15.197.170:53012/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41c4c914-6e46-9e8d-2d75-0000696824ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.106.68:49665/bin.sh","pattern":"[url:value = 'http://210.208.106.68:49665/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--684f11c0-0aac-8fc6-d4ef-0000d063ac97","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.106.68:49665/i","pattern":"[url:value = 'http://210.208.106.68:49665/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4158278-9efc-d449-a34f-0000cafc62b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.85.51.157:47726/i","pattern":"[url:value = 'http://42.85.51.157:47726/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d49524c-93b6-7959-ebc5-00000a7bf775","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.221:37492/i","pattern":"[url:value = 'http://210.208.110.221:37492/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad16cf5d-c4eb-fa05-7e3d-000028a48630","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.20:60687/bin.sh","pattern":"[url:value = 'http://210.208.110.20:60687/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a2fc897-bcb5-c266-ceb8-0000a4d88b5e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.120.245:38927/i","pattern":"[url:value = 'http://42.224.120.245:38927/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d01940c0-8c5d-2e1e-548b-0000f1cb34fb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.157.21:42304/i","pattern":"[url:value = 'http://115.50.157.21:42304/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3006e521-10a5-10ff-7703-00000793cbd5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.80.97:57819/bin.sh","pattern":"[url:value = 'http://182.126.80.97:57819/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27449a3c-4a52-9fd8-ce51-00002318be64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.104.156:49483/bin.sh","pattern":"[url:value = 'http://210.208.104.156:49483/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--581ccbf1-04aa-764b-8511-00007c7f0edb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.44.245:48721/bin.sh","pattern":"[url:value = 'http://42.230.44.245:48721/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--812fe4aa-172b-79e2-94ae-0000b15a9628","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.20.248:59087/bin.sh","pattern":"[url:value = 'http://219.156.20.248:59087/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67d752d3-3bf7-44d6-8866-0000eb83b601","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.172.77.129:45661/i","pattern":"[url:value = 'http://123.172.77.129:45661/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b99ae89-512f-340e-7962-0000a3c5df2d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.194.129:53622/bin.sh","pattern":"[url:value = 'http://42.224.194.129:53622/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d72ab9c-ac69-2f74-6e45-0000f3877165","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.239.81.215:38553/bin.sh","pattern":"[url:value = 'http://113.239.81.215:38553/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20bb9b96-1ce3-8a55-3524-0000c3eeb819","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://92.124.120.65:43084/bin.sh","pattern":"[url:value = 'http://92.124.120.65:43084/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14f2cd4a-7ccb-6f3c-5a46-0000a49c779f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.232.8:44911/i","pattern":"[url:value = 'http://115.55.232.8:44911/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bfdf0c2-48ca-87b7-a8db-0000b1ed6897","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.118.112:41221/i","pattern":"[url:value = 'http://61.52.118.112:41221/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc6d2f2c-d96a-1107-f056-0000e43edf5e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.101.152:53328/i","pattern":"[url:value = 'http://42.224.101.152:53328/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d230214-b91b-f0c9-cd70-00007f085d6f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.4.132.108:50167/i","pattern":"[url:value = 'http://123.4.132.108:50167/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d01d360b-1189-3e26-be05-000012395733","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.224.69:44752/i","pattern":"[url:value = 'http://115.54.224.69:44752/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59bd2738-f130-c924-b3cb-0000b11b8c8b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.132.237:60298/i","pattern":"[url:value = 'http://222.141.132.237:60298/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--251bee29-6840-8c62-27af-000089722f6a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.46.198.143:35674/bin.sh","pattern":"[url:value = 'http://125.46.198.143:35674/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1e1f3c7-feac-1bb3-c39d-0000880aa55a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.13.132:52355/i","pattern":"[url:value = 'http://105.184.13.132:52355/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc393d9e-80b7-9a8a-a449-00003616103e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.98.77:59901/bin.sh","pattern":"[url:value = 'http://196.189.98.77:59901/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a0b2017-6d01-0ea9-f3df-0000ef490d6b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.44.245:48721/i","pattern":"[url:value = 'http://42.230.44.245:48721/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7127421-f8a4-dd88-2625-00007513a424","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.219.0:36990/i","pattern":"[url:value = 'http://182.121.219.0:36990/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c108fc9c-ed0f-3b72-4f4e-0000b6ad2278","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.59.109.9:54831/bin.sh","pattern":"[url:value = 'http://218.59.109.9:54831/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae980698-faea-d053-b8f2-0000aff810b8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.202.74:59244/bin.sh","pattern":"[url:value = 'http://61.53.202.74:59244/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06406f1a-2822-cc07-ca4a-0000717e55f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.22.195.207:60411/i","pattern":"[url:value = 'http://60.22.195.207:60411/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ce3a5a0-815c-14d7-2404-0000c77de3ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.151.74.149:48587/i","pattern":"[url:value = 'http://223.151.74.149:48587/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--603af7bb-95e5-6d0c-c8a5-0000a08cfaf7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.191.230.61:39051/i","pattern":"[url:value = 'http://180.191.230.61:39051/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbaa136a-7f26-81e3-1212-0000e6da00f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.55.50:60411/i","pattern":"[url:value = 'http://182.116.55.50:60411/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7dd8e59-ffc1-f0f7-8726-0000ca794bda","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.85.51.157:47726/bin.sh","pattern":"[url:value = 'http://42.85.51.157:47726/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b66b56dc-844c-3a00-c8dc-00004664cb4e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.209.143:51886/bin.sh","pattern":"[url:value = 'http://219.155.209.143:51886/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99739bb1-b0ed-012f-cf1d-00006b53a247","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.104.156:49483/i","pattern":"[url:value = 'http://210.208.104.156:49483/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a631269d-e819-4826-036e-000093bdedb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.191.230.61:39051/bin.sh","pattern":"[url:value = 'http://180.191.230.61:39051/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--696351d0-3a49-13ee-c35d-00000ee42c00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.236.118.216:50033/bin.sh","pattern":"[url:value = 'http://113.236.118.216:50033/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1c05937-f23a-a9a6-d488-0000254f92b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.224.69:44752/bin.sh","pattern":"[url:value = 'http://115.54.224.69:44752/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c52d740-f2e3-fef3-78c5-0000cff0ab62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.209.143:51886/i","pattern":"[url:value = 'http://219.155.209.143:51886/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64789e47-dd35-12a8-ce2f-000030bf8015","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.54.43.35:53946/i","pattern":"[url:value = 'http://61.54.43.35:53946/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffd9044d-e8a1-9d99-da69-00001757f4b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://41.201.226.25:59953/i","pattern":"[url:value = 'http://41.201.226.25:59953/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39df35a3-fa94-2ff0-cebe-00009b15ab5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://189.7.90.15:36886/bin.sh","pattern":"[url:value = 'http://189.7.90.15:36886/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8feef2c9-98c6-0caa-5d6e-00000b30a4ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://95.165.187.102:54251/i","pattern":"[url:value = 'http://95.165.187.102:54251/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33f68114-0651-1fc0-cd1c-0000991fb012","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://81.227.43.128:45355/i","pattern":"[url:value = 'http://81.227.43.128:45355/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1ab48f0-f007-3bae-1309-0000381689d2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.226.58:38902/bin.sh","pattern":"[url:value = 'http://115.50.226.58:38902/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6339bf53-19ec-5f88-6830-0000a6d4ef5b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.145.245:55982/bin.sh","pattern":"[url:value = 'http://115.63.145.245:55982/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de4c354a-7f76-48be-0b38-00005420826b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.46.198.143:35674/i","pattern":"[url:value = 'http://125.46.198.143:35674/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f762bfba-6bd0-8cc7-81b5-0000fc5e8c9c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.182.147:58870/i","pattern":"[url:value = 'http://123.14.182.147:58870/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--205f54bd-867e-2144-9b9a-00001cf3fcf8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.252.93:34307/i","pattern":"[url:value = 'http://42.239.252.93:34307/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bb3385e-8e5b-cd89-086d-0000d7a318c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.167.86.22:49899/bin.sh","pattern":"[url:value = 'http://175.167.86.22:49899/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21b3695c-d0c4-03bd-c15d-00007787a083","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.245.232:58215/bin.sh","pattern":"[url:value = 'http://42.234.245.232:58215/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b787c907-9fdc-3e2f-e00f-000098dd2918","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.153.131:40429/i","pattern":"[url:value = 'http://182.121.153.131:40429/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6796b11-285d-6a5c-695e-00004642f7bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.97.89.239:48639/bin.sh","pattern":"[url:value = 'http://123.97.89.239:48639/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20493c42-3f47-9e30-b884-0000fb9b9ceb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.229.134:40628/i","pattern":"[url:value = 'http://222.139.229.134:40628/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8ca2318-48f6-46af-4efc-0000235beb61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.252.93:34307/bin.sh","pattern":"[url:value = 'http://42.239.252.93:34307/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98c4abf4-9ad3-e335-2f1f-00009741fdb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.250.74:60904/bin.sh","pattern":"[url:value = 'http://182.121.250.74:60904/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0261e5b1-0cb3-197e-c410-0000295687ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.245.232:58215/i","pattern":"[url:value = 'http://42.234.245.232:58215/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e74b1047-fdbd-d792-dea0-00002a6f5445","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.55.19:56855/bin.sh","pattern":"[url:value = 'http://115.55.55.19:56855/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--016334e0-8eaf-75b4-d945-00003205561a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.173.127:59094/i","pattern":"[url:value = 'http://42.235.173.127:59094/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85751b7b-72d4-fd98-01d2-0000258b8cb3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.150.168:38582/i","pattern":"[url:value = 'http://61.53.150.168:38582/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac30086a-33d7-2c18-beac-00005f36b150","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.97.89.239:48639/i","pattern":"[url:value = 'http://123.97.89.239:48639/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb1c8c7b-5624-864b-1ddb-00002fe549ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.20:60687/i","pattern":"[url:value = 'http://210.208.110.20:60687/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bc7ee31-ac90-beb0-4365-000014224373","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.144.141:59560/i","pattern":"[url:value = 'http://115.48.144.141:59560/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d835f896-07a3-ff2e-0c80-0000873e2ea2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.131.167.151:34514/bin.sh","pattern":"[url:value = 'http://124.131.167.151:34514/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1350a1e-a735-404a-edc4-00004e92e7ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.221:37492/bin.sh","pattern":"[url:value = 'http://210.208.110.221:37492/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9309535-622b-6569-ee82-0000fc392cff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://111.72.43.182:49489/i","pattern":"[url:value = 'http://111.72.43.182:49489/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53fc4a46-686c-416c-4a3c-00003efcad37","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.250.74:60904/i","pattern":"[url:value = 'http://182.121.250.74:60904/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16b8e7c0-bdc5-cf38-d858-0000b15c8d6d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.245.119:56931/i","pattern":"[url:value = 'http://123.14.245.119:56931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aa9bfe2-19f3-3e51-1e60-00009247e821","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.54.43.35:53946/bin.sh","pattern":"[url:value = 'http://61.54.43.35:53946/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db2cf3dd-078f-09cc-4f57-00007c6e3d8b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://92.124.120.65:43084/i","pattern":"[url:value = 'http://92.124.120.65:43084/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f23f7327-83fb-d657-6865-00007b001231","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.242.207:40709/i","pattern":"[url:value = 'http://123.11.242.207:40709/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8981d19-bf16-a033-098f-0000e639aac3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.248.137:53264/i","pattern":"[url:value = 'http://115.55.248.137:53264/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb569e5b-7459-8908-ac14-0000f955d751","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.167.86.22:49899/i","pattern":"[url:value = 'http://175.167.86.22:49899/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d99cda3-f707-8ebc-b82b-0000d8cf2469","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://120.84.214.107:59459/i","pattern":"[url:value = 'http://120.84.214.107:59459/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc3c9174-7d17-a91d-15c7-0000e0bb4202","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.207.26:37498/i","pattern":"[url:value = 'http://115.63.207.26:37498/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--161a212a-8d45-aef1-c2d7-0000b0516a17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.180.35:55889/i","pattern":"[url:value = 'http://222.140.180.35:55889/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a4048ec-1996-fdea-26b3-00001af2e8fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.207.26:37498/bin.sh","pattern":"[url:value = 'http://115.63.207.26:37498/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81044243-9125-6965-2921-000043889f28","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.147:36598/i","pattern":"[url:value = 'http://210.208.110.147:36598/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b96a4b2-fb0e-6f74-11c7-0000e1ab20d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.114.153:35365/i","pattern":"[url:value = 'http://182.116.114.153:35365/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e1cdeb0-b53b-81a8-00ca-00003a920f7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.220:46346/i","pattern":"[url:value = 'http://210.208.111.220:46346/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c02e6f6c-0444-172f-eb4f-00008b080d8d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.190.18.137:43516/bin.sh","pattern":"[url:value = 'http://123.190.18.137:43516/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81fe9955-cb17-c11d-b887-00006487473c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.116.107:58255/i","pattern":"[url:value = 'http://210.208.116.107:58255/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ebafd5c-7e0f-fd29-e2f2-00001b765776","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.112.59.94:60395/i","pattern":"[url:value = 'http://125.112.59.94:60395/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3f4d3e9-dccb-bb41-12d1-000042800eeb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.69.85.225:50581/i","pattern":"[url:value = 'http://36.69.85.225:50581/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d49899e-bc4f-1360-1664-0000e6ba0aff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.147:36598/bin.sh","pattern":"[url:value = 'http://210.208.110.147:36598/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73b587c5-ea31-e57a-e1e3-0000acdb58f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.240.9.116:57352/i","pattern":"[url:value = 'http://182.240.9.116:57352/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bef2322-dd55-512a-d279-000041a35f93","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.116.107:58255/bin.sh","pattern":"[url:value = 'http://210.208.116.107:58255/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--880ceeef-0c9a-8e0c-0657-00009f8340f2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.175.205.71:36863/i","pattern":"[url:value = 'http://175.175.205.71:36863/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42b359aa-2442-6a3f-4c89-000019889971","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.213.168:46781/bin.sh","pattern":"[url:value = 'http://105.184.213.168:46781/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaba294b-a503-511f-acf0-0000e74be21c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.16.206:50901/i","pattern":"[url:value = 'http://219.157.16.206:50901/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c5365b4-4387-1c16-d1d1-0000dcc98ce2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.22.193.90:43235/bin.sh","pattern":"[url:value = 'http://60.22.193.90:43235/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21e5a0d7-bdb0-42eb-b680-000002d7cc24","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.149.237:60566/bin.sh","pattern":"[url:value = 'http://42.239.149.237:60566/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6caf3f7-8b42-8363-1080-000000ddb9dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.46.30.224:41739/i","pattern":"[url:value = 'http://38.46.30.224:41739/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fac8baf-8502-783e-ad55-00002145f1df","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.74:34826/bin.sh","pattern":"[url:value = 'http://210.208.111.74:34826/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f1e12b6-64ed-ff80-7a8e-0000b75e8ac3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.223.143.124:45357/bin.sh","pattern":"[url:value = 'http://117.223.143.124:45357/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93b8fc72-ec0a-8c08-38af-0000deb06c0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://111.163.247.38:57877/bin.sh","pattern":"[url:value = 'http://111.163.247.38:57877/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a1869d9-d05c-c6cd-8744-0000d17d03d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://111.163.247.38:57877/i","pattern":"[url:value = 'http://111.163.247.38:57877/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3304f030-14ac-4de7-f44b-0000c3cc85a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.213.168:46781/i","pattern":"[url:value = 'http://105.184.213.168:46781/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2185126e-c65d-1718-906d-00005319a4d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.149.237:60566/i","pattern":"[url:value = 'http://42.239.149.237:60566/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--839a03df-f896-ea7b-05b7-000049541eb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.74:34826/i","pattern":"[url:value = 'http://210.208.111.74:34826/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceaaedc3-755f-b77a-2298-0000ba4caa2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.242.56.39:48840/i","pattern":"[url:value = 'http://112.242.56.39:48840/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c133c7bd-a271-5ded-7ada-0000029b08b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.135.208:46338/bin.sh","pattern":"[url:value = 'http://61.53.135.208:46338/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32041c85-d3ec-aadb-cdec-0000f29205b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.231.155:45731/bin.sh","pattern":"[url:value = 'http://182.121.231.155:45731/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de7acc5d-55ff-91de-99a3-0000478df8f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.22.193.90:43235/i","pattern":"[url:value = 'http://60.22.193.90:43235/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e1f5d11-f746-9034-add9-00006b8fa25b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.135.208:46338/i","pattern":"[url:value = 'http://61.53.135.208:46338/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf54a176-02ba-8064-57aa-00007f1049c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.231.155:45731/i","pattern":"[url:value = 'http://182.121.231.155:45731/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13e963c1-a006-f953-a2aa-0000f31ddb72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.26.83.196:34302/bin.sh","pattern":"[url:value = 'http://117.26.83.196:34302/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08c460d3-c4cd-b6d1-8441-0000824da3c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.86.155.61:50155/bin.sh","pattern":"[url:value = 'http://42.86.155.61:50155/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e563d6b4-ce75-f620-d949-000035f841fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.i686","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfbd9a18-75ef-a95b-6134-0000d83d1a18","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.arc","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57c2203d-c6a7-057b-642f-0000382bb404","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.86.155.61:50155/i","pattern":"[url:value = 'http://42.86.155.61:50155/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb8d0476-4ac2-153b-c623-0000536f6b3e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_31ea8e1c01e0e0f4.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_31ea8e1c01e0e0f4.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c2b4ac3-e41a-416b-83f7-0000c1b533e4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.76.29.161/389242390482/dlr.sh","pattern":"[url:value = 'http://31.76.29.161/389242390482/dlr.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4e200fe-70f8-5b2e-4400-0000052898d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.246.145:56603/i","pattern":"[url:value = 'http://219.157.246.145:56603/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b193552f-e68b-4f73-b165-000069ad2f2d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.133.115:54046/bin.sh","pattern":"[url:value = 'http://61.53.133.115:54046/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a0aa6c6-8bec-029e-926b-000079dc5d07","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/gpon","pattern":"[url:value = 'http://31.77.227.102/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd6088f-0bf4-e2e0-cacd-0000b976e407","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/hik","pattern":"[url:value = 'http://31.77.227.102/hik']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9590903-7ac8-4887-37eb-00003545a917","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/vitek","pattern":"[url:value = 'http://31.77.227.102/vitek']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c64a6a6-3eaa-0aab-1a4a-00009b01da7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/arm7","pattern":"[url:value = 'http://31.77.227.102/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5757c380-91a3-b03b-c561-0000009b1ea3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm5n","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm5n']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a640a5fc-facb-4842-0f35-0000ed04c680","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fef34d2-fc88-03ac-ec6f-0000f1e4a881","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.mips","pattern":"[url:value = 'http://31.77.227.102/d/mini.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93031da4-fe72-1f98-d17a-00004c628d27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.arm","pattern":"[url:value = 'http://31.77.227.102/d/mini.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--507aa11b-6247-80c4-8919-0000e3c91ce5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.armv5l","pattern":"[url:value = 'http://31.77.227.102/d/xd.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb972e6e-8405-6baa-bf93-0000d353acf4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.arm7","pattern":"[url:value = 'http://31.77.227.102/d/mini.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4961905a-6c73-b5c8-4fb8-0000dea93555","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.armv4l","pattern":"[url:value = 'http://31.77.227.102/d/xd.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6561a102-d097-01f4-cf44-00007a5b4dc3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm7n","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm7n']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76dbaaa8-c94d-1662-6760-000066f4163f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.x86","pattern":"[url:value = 'http://31.77.227.102/d/mini.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c7a9043-54fe-2fc7-bf48-0000473b6473","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm6n","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm6n']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--401cf108-b603-c090-baf5-0000e3c398e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.arm64","pattern":"[url:value = 'http://31.77.227.102/d/mini.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--439812f0-8627-8478-9970-0000c7925d98","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.x86","pattern":"[url:value = 'http://31.77.227.102/d/xd.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--301cd53c-e4c3-2adf-e13f-00003149347f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm5","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b639630-b788-e2c8-fe67-000023bdbd1b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/arm6","pattern":"[url:value = 'http://31.77.227.102/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eb43616-79e5-ec7e-8207-0000a9cd7c12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.armv7","pattern":"[url:value = 'http://31.77.227.102/d/xd.armv7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9158486-82af-c809-f691-000023fc9b91","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm6","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc901ef8-4c84-04e6-cbfd-00006befcb91","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.arm6","pattern":"[url:value = 'http://31.77.227.102/d/mini.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de12b410-a36d-6397-2ea2-00009b40fcf4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm7","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c26ac78a-8681-8f1b-51ac-0000310812f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/arm5","pattern":"[url:value = 'http://31.77.227.102/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55994f42-115c-538f-c810-0000795a647f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.arm5","pattern":"[url:value = 'http://31.77.227.102/d/mini.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b57f2d8-5a89-3e92-a0da-0000a4696635","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.armv6l","pattern":"[url:value = 'http://31.77.227.102/d/xd.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--624cc399-c5ed-e395-a4f8-000099094f85","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.armv7l","pattern":"[url:value = 'http://31.77.227.102/d/xd.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e4cf2c1-abf4-3675-8ef1-00003dfb3713","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm4n","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm4n']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2525daf-016c-6c7c-3467-0000ac224c80","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/arm","pattern":"[url:value = 'http://31.77.227.102/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d867783-b684-720a-ae85-000073a0290e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.aarch64","pattern":"[url:value = 'http://31.77.227.102/d/xd.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09335b57-51ce-3dfc-1476-00007b1a981b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.powerpc","pattern":"[url:value = 'http://31.77.227.102/d/xd.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfb86865-893b-fab8-ed7e-0000d2f496cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.mpsl","pattern":"[url:value = 'http://31.77.227.102/d/xd.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--daad005f-9566-4079-9c53-00003bf1f3ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.mips64","pattern":"[url:value = 'http://31.77.227.102/d/xd.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5344802-2dca-51a9-89f4-0000eee6a0ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/arm64","pattern":"[url:value = 'http://31.77.227.102/arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f81cbc1a-4b8e-5811-17c4-0000b9b6de0b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/mips","pattern":"[url:value = 'http://31.77.227.102/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e8bd70e-7fed-3844-b994-00004afb61fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.mipsel","pattern":"[url:value = 'http://31.77.227.102/d/xd.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8315d08-4f29-8d5c-68a1-0000a4ae37fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.ppc440fp","pattern":"[url:value = 'http://31.77.227.102/d/xd.ppc440fp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dce7ad3-c30f-7c76-f220-0000d2b5b041","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/mpsl","pattern":"[url:value = 'http://31.77.227.102/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e2a233e-5348-c13a-b8b5-0000bf9133ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.ppc","pattern":"[url:value = 'http://31.77.227.102/d/xd.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a6aaeac-11dd-50b8-5f5f-0000b9f7f881","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.mips","pattern":"[url:value = 'http://31.77.227.102/d/xd.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7c428a9-e459-10a4-26b4-0000e38b8bb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm64","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--471be5aa-daba-e174-befb-000089f5531a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm4","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da3df21b-d9e1-2ae9-6dd9-00009ae7c6cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.mpsl","pattern":"[url:value = 'http://31.77.227.102/d/mini.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc7b1459-d4e6-d73d-4082-00007e622fac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://83.228.109.209:34880/i","pattern":"[url:value = 'http://83.228.109.209:34880/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2bedf75-342b-bb6e-6a26-00008c35a8bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://138.204.196.254:46255/bin.sh","pattern":"[url:value = 'http://138.204.196.254:46255/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42c3ad78-714e-036e-98ff-0000b7502daa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.133.115:54046/i","pattern":"[url:value = 'http://61.53.133.115:54046/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bfa5b07-371f-26dc-8ee0-0000f51eccfd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.239.216.250:41208/bin.sh","pattern":"[url:value = 'http://113.239.216.250:41208/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80c3edbd-be91-367d-1532-0000d04d36c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://138.204.196.254:46255/i","pattern":"[url:value = 'http://138.204.196.254:46255/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e22762a5-04f0-4e66-f1e1-0000d9046689","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.249.227:40515/i","pattern":"[url:value = 'http://219.157.249.227:40515/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--558ca742-4046-5bb7-ddf9-00008220f970","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.239.216.250:41208/i","pattern":"[url:value = 'http://113.239.216.250:41208/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0ce8c1f-42ef-465f-2027-000008e699f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.123.40.206:33747/i","pattern":"[url:value = 'http://112.123.40.206:33747/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4811f558-0fbe-cc63-2d4f-000095a20fe4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.x86_64","pattern":"[url:value = 'http://167.86.99.169/iran.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c89ed6a7-acba-6abc-e9ea-0000e894d259","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.m68k","pattern":"[url:value = 'http://167.86.99.169/iran.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fe9055f-7333-ccdb-7352-000037378285","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.217.97.115/topinmsi.png","pattern":"[url:value = 'http://217.217.97.115/topinmsi.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84b2e271-5ea0-abce-4188-0000e8620483","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.mips","pattern":"[url:value = 'http://167.86.99.169/iran.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dc8fd10-2ba8-d119-3e29-0000dcfd33b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.107.186/clp4.exe","pattern":"[url:value = 'http://196.251.107.186/clp4.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75626935-e3d8-6838-af96-0000c155b23a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/vKxen","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/vKxen']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e3ee54d-4cd7-e487-a465-00006e5c4151","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://cryptomeshforge10.lol/crypt/21-32/kliulij.exe","pattern":"[url:value = 'http://cryptomeshforge10.lol/crypt/21-32/kliulij.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b917cba-f89e-7c65-0187-0000383dab7b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_49f73ea936886e59.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_49f73ea936886e59.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a207f576-bb12-8be2-a183-000053a5d1b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.172.167.65:8080/s.ps1","pattern":"[url:value = 'http://167.172.167.65:8080/s.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c24ec80-854a-590c-4c4e-0000db8b0693","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://140.99.32.48/b2f628/cronb.sh","pattern":"[url:value = 'http://140.99.32.48/b2f628/cronb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80d3a466-4cd2-fbe7-535f-00006d9d083f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://209.141.58.166/b2f628/cronb.sh","pattern":"[url:value = 'http://209.141.58.166/b2f628/cronb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e8632ab-8928-3e0a-6076-0000c8f08565","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.253.90:48325/bin.sh","pattern":"[url:value = 'http://123.14.253.90:48325/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a7b72ce-07ab-ed90-8908-0000b5994d7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.7.222.46:55307/bin.sh","pattern":"[url:value = 'http://123.7.222.46:55307/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ae77be5-a8fe-7dd7-dc88-0000a9fa8079","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.ppc","pattern":"[url:value = 'http://94.154.43.227/d/xd.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fb599b2-01a5-5328-c264-00002924198f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.sh4","pattern":"[url:value = 'http://94.154.43.227/d/xd.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf077214-50aa-dace-e8d9-00006c34c01a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.arm7","pattern":"[url:value = 'http://94.154.43.227/d/xd.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57554a2b-5cc5-ecb7-6641-0000d1f9ee0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.x86","pattern":"[url:value = 'http://94.154.43.227/d/xd.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57535c7e-0171-eaef-a74e-00004e7512b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.m68k","pattern":"[url:value = 'http://94.154.43.227/d/xd.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21091338-eaf4-27fa-ef5b-0000c63d0891","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.arm5","pattern":"[url:value = 'http://94.154.43.227/d/xd.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b7f68a8-7e72-f6be-7d7d-00004e83c46f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.mips","pattern":"[url:value = 'http://94.154.43.227/d/xd.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b28dfd27-fd63-fc6b-f676-0000fb6f7514","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.arm","pattern":"[url:value = 'http://94.154.43.227/d/xd.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeadae61-29c9-e4d1-4c7b-00002580aa25","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.mpsl","pattern":"[url:value = 'http://94.154.43.227/d/xd.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78a1c5bc-e334-2419-35a0-00002f6ef2d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.spc","pattern":"[url:value = 'http://94.154.43.227/d/xd.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8004282-a066-c616-48ac-0000d488a77f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.arm6","pattern":"[url:value = 'http://94.154.43.227/d/xd.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4b15f2c-cef2-5992-d530-00004464381f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.163.180:38931/bin.sh","pattern":"[url:value = 'http://115.48.163.180:38931/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4044d42-7f7f-4cbc-4157-0000c5d2e9e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.7.222.46:55307/i","pattern":"[url:value = 'http://123.7.222.46:55307/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b327e0c-1129-b6c1-7838-00008407b929","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.6.252.211:41723/bin.sh","pattern":"[url:value = 'http://42.6.252.211:41723/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82671c71-33f7-65db-01f4-000094e4eeed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.107.186/2.7.exe","pattern":"[url:value = 'http://196.251.107.186/2.7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--685aa78b-54b0-f036-f512-000073ee2363","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_5770984c4235c5b0.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_5770984c4235c5b0.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c244cf58-8b9c-eef6-380c-0000ab0a746c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.154.157:40086/i","pattern":"[url:value = 'http://42.234.154.157:40086/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58a6a755-4977-6340-1dc5-000040f2855e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.powerpc","pattern":"[url:value = 'http://167.86.99.169/iran.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d701e5d7-b3b4-3a00-69f5-000028be51f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.sparc","pattern":"[url:value = 'http://167.86.99.169/iran.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86ff8db3-cc06-d777-fa6e-000090410cea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.mipsrouter","pattern":"[url:value = 'http://167.86.99.169/iran.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6577ef3f-37e9-fb67-9eec-0000ccc6ecda","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.mipsel","pattern":"[url:value = 'http://167.86.99.169/iran.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29b0fba8-fca2-3c93-5426-00001f34c2a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.armv7l","pattern":"[url:value = 'http://167.86.99.169/iran.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ddbe5f4-1c99-cdf5-01a6-000074b3922a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.sh4","pattern":"[url:value = 'http://167.86.99.169/iran.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30abcae9-823f-ab7c-dfc6-00002254eb15","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.armv6l","pattern":"[url:value = 'http://167.86.99.169/iran.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--029da86b-34f5-2693-753a-00005894b875","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.armv4l","pattern":"[url:value = 'http://167.86.99.169/iran.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b86992a-bade-589c-1e39-000065f491c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.armv5l","pattern":"[url:value = 'http://167.86.99.169/iran.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51a2b8d7-de64-b08d-3aa6-00006874803e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.i486","pattern":"[url:value = 'http://167.86.99.169/iran.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--275bac66-cc0a-7308-466d-000046278982","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.arc","pattern":"[url:value = 'http://167.86.99.169/iran.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--183b6e82-d7c1-dc68-b503-00005cb22555","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/telnet.sh","pattern":"[url:value = 'http://167.86.99.169/telnet.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc5d1885-5eeb-9565-431f-000084492909","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/cat.sh","pattern":"[url:value = 'http://167.86.99.169/cat.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e0a9114-9df6-ef68-659b-000067d61c59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.54.159.124:42338/bin.sh","pattern":"[url:value = 'http://42.54.159.124:42338/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1fd4992-e39a-1f49-88f2-0000e856531c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.163.180:38931/i","pattern":"[url:value = 'http://115.48.163.180:38931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a611abaf-39a9-fa0a-3281-000001111a85","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.6.252.211:41723/i","pattern":"[url:value = 'http://42.6.252.211:41723/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dff91d9b-828c-91d2-96a6-00003e3d34c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.253.90:48325/i","pattern":"[url:value = 'http://123.14.253.90:48325/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--743711f1-4fea-6cb4-9fe7-0000ab14da22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.233.250:43213/bin.sh","pattern":"[url:value = 'http://115.57.233.250:43213/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60d2c6ba-ff35-446b-70d0-0000c9c2fd38","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.233.250:43213/i","pattern":"[url:value = 'http://115.57.233.250:43213/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84de48dc-09b3-4e14-6320-0000292eb3a0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.49.230.40/1.sh","pattern":"[url:value = 'http://37.49.230.40/1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--966be732-d888-3f07-ff13-000018c6a93d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.49.230.40/2.sh","pattern":"[url:value = 'http://37.49.230.40/2.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ed78057-f317-20e8-5ea3-0000beb1a289","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.49.230.40/3.sh","pattern":"[url:value = 'http://37.49.230.40/3.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b72a989e-5def-3d20-fb4b-000061d81927","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.54.159.124:42338/i","pattern":"[url:value = 'http://42.54.159.124:42338/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36446438-8fa3-c858-754c-0000ae2eda9a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.23.144.125/40/verygoodpersonwithbestenergycandlekingsformebest.vbe","pattern":"[url:value = 'http://198.23.144.125/40/verygoodpersonwithbestenergycandlekingsformebest.vbe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8db0079e-13b2-77b7-2379-000087dbf592","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.23.144.125/wed/crypted.ps1","pattern":"[url:value = 'http://198.23.144.125/wed/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bff66655-478c-9f8f-c18a-0000f9783242","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/x86_64","pattern":"[url:value = 'http://176.65.139.209/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7461510-90b1-e4b5-c6dc-0000405ae488","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/w.sh","pattern":"[url:value = 'http://176.65.139.209/w.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1aab49f-a83f-ab9c-9f65-0000b4939bd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/arm7","pattern":"[url:value = 'http://176.65.139.209/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb10955b-f8ad-6656-67f6-0000851eea7f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/spc","pattern":"[url:value = 'http://176.65.139.209/bins/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc04c955-92d4-ce3f-f291-000083540127","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/sh4","pattern":"[url:value = 'http://176.65.139.209/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92907c32-32e5-0eef-38b3-0000a01cd17c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/mipsel","pattern":"[url:value = 'http://176.65.139.209/bins/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69fe9af5-ce8b-5d9e-dd1a-000096d24977","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/m68k","pattern":"[url:value = 'http://176.65.139.209/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25d2ae23-063c-5eae-45b7-000096249fad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/mips","pattern":"[url:value = 'http://176.65.139.209/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9562b02-e1f6-cae6-6875-0000038a98d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/ppc","pattern":"[url:value = 'http://176.65.139.209/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86ad8409-683b-835e-5d5d-00000c2ffcbd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/arm6","pattern":"[url:value = 'http://176.65.139.209/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--713cadc0-9e9c-1c46-5dfc-0000511f6dbc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/arm","pattern":"[url:value = 'http://176.65.139.209/bins/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fa4d5b3-416a-4d6a-57e3-00001e9a5353","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/arm5","pattern":"[url:value = 'http://176.65.139.209/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94e41acc-8d35-8327-b763-00007b89f6a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/x86","pattern":"[url:value = 'http://176.65.139.209/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67a8a269-c19f-8da1-4378-0000f74c40d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.212/eclipse.sh","pattern":"[url:value = 'http://176.65.139.212/eclipse.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4042b8b9-a043-7fe0-0038-00008a37847d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.x86_64","pattern":"[url:value = 'http://176.65.139.212/eclipse.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fa326f6-0cd2-62e7-7489-0000c93e3b35","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.powerpc","pattern":"[url:value = 'http://176.65.139.212/eclipse.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0acee58a-f318-2fd9-a8aa-0000470133ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.armv4l","pattern":"[url:value = 'http://176.65.139.212/eclipse.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c9dfa5e-4a27-5d7c-c819-0000f2b9a096","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.i686","pattern":"[url:value = 'http://176.65.139.212/eclipse.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a097496-a5f3-7d6b-7d03-00003f678520","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.mips","pattern":"[url:value = 'http://176.65.139.212/eclipse.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21e3b649-0200-f95c-d20b-000000a1493c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.armv7l","pattern":"[url:value = 'http://176.65.139.212/eclipse.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13d5d4cb-aa77-51e6-4786-00007a611a5c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.armv5l","pattern":"[url:value = 'http://176.65.139.212/eclipse.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d24a2de-b347-d136-7d70-0000d3536743","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.mipsel","pattern":"[url:value = 'http://176.65.139.212/eclipse.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38f88708-52ec-4ec4-e71b-00003dc1608c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.armv6l","pattern":"[url:value = 'http://176.65.139.212/eclipse.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6254040-6125-3776-e1c0-00003f9153fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.m68k","pattern":"[url:value = 'http://176.65.139.212/eclipse.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4edb4407-9446-acdc-0f13-0000742dd238","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.i586","pattern":"[url:value = 'http://176.65.139.212/eclipse.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7bf6a66-48e0-932e-f259-00007ce0dfcb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.sh4","pattern":"[url:value = 'http://176.65.139.212/eclipse.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16b2d0a8-79cb-f2ef-1010-0000874a5edf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.215.27:44835/i","pattern":"[url:value = 'http://120.84.215.27:44835/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1331b029-0c03-b800-038b-000076f19650","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://81.227.43.128:45355/bin.sh","pattern":"[url:value = 'http://81.227.43.128:45355/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed99707c-7d59-a4f5-7fe2-00000f718661","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.138.107.171:58489/i","pattern":"[url:value = 'http://116.138.107.171:58489/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42f573dd-ad22-cb12-38a0-0000b8e2cf29","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.110.38.44:54807/bin.sh","pattern":"[url:value = 'http://125.110.38.44:54807/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22e3fb6b-cc66-cd74-c1cc-00007ebfeaf9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.252.20:55570/i","pattern":"[url:value = 'http://125.42.252.20:55570/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f6ce903-145c-795f-23a6-00003d889e7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://46.16.150.139:51622/bin.sh","pattern":"[url:value = 'http://46.16.150.139:51622/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd0d2d34-a860-d0e9-e5d7-0000898f2e7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://85.12.251.50:45018/bin.sh","pattern":"[url:value = 'http://85.12.251.50:45018/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e263a65e-0b35-e418-3720-0000beb26d7b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://46.16.150.139:51622/i","pattern":"[url:value = 'http://46.16.150.139:51622/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfc7778d-6dcb-d6e7-b4f8-000078e57580","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.160.130.178:42478/bin.sh","pattern":"[url:value = 'http://103.160.130.178:42478/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4065890-0e7b-4429-d2a2-000092648f83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://85.12.251.50:45018/i","pattern":"[url:value = 'http://85.12.251.50:45018/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86847a8b-1d2c-b3f5-73f4-00002613670c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.160.130.178:42478/i","pattern":"[url:value = 'http://103.160.130.178:42478/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50e26eab-6abc-d965-4bff-000094213202","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.7.198:54475/i","pattern":"[url:value = 'http://115.49.7.198:54475/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c6215a9-0553-c378-048e-0000b6d6c56d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.23.239.236:48291/bin.sh","pattern":"[url:value = 'http://60.23.239.236:48291/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15624c0b-5fb6-bc70-82f9-00000753aa27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.23.239.236:48291/i","pattern":"[url:value = 'http://60.23.239.236:48291/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--036e5113-b85c-004f-d37e-0000e3bc78ce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.55.240/nm/a","pattern":"[url:value = 'http://178.16.55.240/nm/a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba64df5a-def8-255b-10c9-0000d92292e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.133.180:50791/bin.sh","pattern":"[url:value = 'http://196.190.133.180:50791/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1805bd4a-a9ef-41a6-b5a1-0000a87a69da","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.46.67:33765/i","pattern":"[url:value = 'http://222.139.46.67:33765/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f34753f0-772b-8762-1a36-0000389cec29","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.55.240/a","pattern":"[url:value = 'http://178.16.55.240/a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efd498db-f71a-4871-f690-00004d8c894f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.6.168.74:46806/bin.sh","pattern":"[url:value = 'http://124.6.168.74:46806/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6cbd4a8-8ce9-bef8-059e-0000caff52e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.214.134:40959/i","pattern":"[url:value = 'http://120.84.214.134:40959/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9173aed8-13bf-e3d7-0afa-00008e649056","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.55.107.64:42203/bin.sh","pattern":"[url:value = 'http://42.55.107.64:42203/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b172d4b-3557-627e-9931-00002b40f89c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.82.0:41636/bin.sh","pattern":"[url:value = 'http://115.63.82.0:41636/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e75492de-c09f-8421-fbfe-00005c102006","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.53.74:32795/bin.sh","pattern":"[url:value = 'http://182.127.53.74:32795/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd320d2-d22d-c2df-1940-0000f02503c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.162.214.49:58599/bin.sh","pattern":"[url:value = 'http://60.162.214.49:58599/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--487b03f1-e8d8-c079-0f4f-0000ac8aa776","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.55.107.64:42203/i","pattern":"[url:value = 'http://42.55.107.64:42203/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e7608d0-16e6-7222-2f2d-000008402ee1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.82.0:41636/i","pattern":"[url:value = 'http://115.63.82.0:41636/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eb29085-a465-c3ba-f43d-000047a6c4e1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.34.219:49245/bin.sh","pattern":"[url:value = 'http://182.112.34.219:49245/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77502cee-3053-af60-d750-000005508229","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.53.74:32795/i","pattern":"[url:value = 'http://182.127.53.74:32795/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6baf6919-7e33-fd1a-63fc-000015d7b3ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.19.212.208:47835/bin.sh","pattern":"[url:value = 'http://60.19.212.208:47835/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d43eead-6ed8-c9d2-b5ae-00000afe4548","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.34.219:49245/i","pattern":"[url:value = 'http://182.112.34.219:49245/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--571bcf40-fc4f-e442-b1e8-000042ebca54","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.4.132.108:50167/bin.sh","pattern":"[url:value = 'http://123.4.132.108:50167/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71eeaae9-67b6-8928-9928-0000411f35ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.55.240/nmm/a","pattern":"[url:value = 'http://178.16.55.240/nmm/a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--474f0bbf-c7cb-7c25-7363-00003fe3790e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.183.51.162:34711/i","pattern":"[url:value = 'http://119.183.51.162:34711/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52ed5f54-4670-db03-87c9-00007c5b1cce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.36.131:50970/bin.sh","pattern":"[url:value = 'http://182.116.36.131:50970/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9437857-e61a-4298-8013-000095b69eb6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.22.195.207:60411/bin.sh","pattern":"[url:value = 'http://60.22.195.207:60411/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f330dec4-503e-eeeb-073e-00005bb2a3fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.186.228.173:47843/bin.sh","pattern":"[url:value = 'http://110.186.228.173:47843/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--479b2fd9-f4b3-1297-6bd2-000003ef39f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.48.159:45678/bin.sh","pattern":"[url:value = 'http://182.117.48.159:45678/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed37052d-1653-0dee-7aae-00000129c1ba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.36.131:50970/i","pattern":"[url:value = 'http://182.116.36.131:50970/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7de4c800-6dc2-652d-26f2-000050323ef4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.245.182:54119/bin.sh","pattern":"[url:value = 'http://123.9.245.182:54119/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c7ffa28-380c-ea7a-65a1-0000ecc13760","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.245.182:54119/i","pattern":"[url:value = 'http://123.9.245.182:54119/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b52c32b-d278-d738-4408-0000a5dc5871","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.186.228.173:47843/i","pattern":"[url:value = 'http://110.186.228.173:47843/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af95808f-0831-8f85-9f76-0000a5f9e63c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/px86","pattern":"[url:value = 'http://31.77.227.134/bins/px86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd6df74c-ad47-5ba6-57d5-0000e5085b58","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.26:55671/bin.sh","pattern":"[url:value = 'http://210.208.111.26:55671/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcb3a85e-a2c7-7db4-8d96-0000a6e2927f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.23.192.74:54261/bin.sh","pattern":"[url:value = 'http://60.23.192.74:54261/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6363da11-a0ac-7635-6e9e-000046fe91fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.139.34.163:54048/bin.sh","pattern":"[url:value = 'http://110.139.34.163:54048/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd17407c-1b33-1d42-4e47-0000da371ee5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.129.220:50657/i","pattern":"[url:value = 'http://115.55.129.220:50657/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67b6b767-daa2-9adc-befe-00003068b6aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.61.46.86:54016/i","pattern":"[url:value = 'http://115.61.46.86:54016/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e685e54-9e94-7c45-0e18-0000f8925a1c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.26:55671/i","pattern":"[url:value = 'http://210.208.111.26:55671/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--233713fe-5f49-efd2-def4-0000927effca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.23.192.74:54261/i","pattern":"[url:value = 'http://60.23.192.74:54261/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb07afa3-58d2-2401-af23-000098b393e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.237.34.160:35437/bin.sh","pattern":"[url:value = 'http://42.237.34.160:35437/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5a3860c-98ce-d12a-15b5-0000df6a71b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.139.34.163:54048/i","pattern":"[url:value = 'http://110.139.34.163:54048/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44c0251f-81b3-98f2-f64f-0000909bb3f0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.146.90:36045/i","pattern":"[url:value = 'http://123.5.146.90:36045/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecb9a077-746e-c1e6-aa0e-0000b9728c56","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.26.210.12:56867/bin.sh","pattern":"[url:value = 'http://36.26.210.12:56867/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc2678a3-8944-31e7-0c3e-00001aa3d068","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.130:49996/i","pattern":"[url:value = 'http://210.208.110.130:49996/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4822490-9a4c-c65a-e39a-0000fb3bfe50","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.38.136:39999/bin.sh","pattern":"[url:value = 'http://221.14.38.136:39999/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88636432-dc7f-c19c-df02-000006b3ea99","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://78.165.96.230:50272/bin.sh","pattern":"[url:value = 'http://78.165.96.230:50272/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58b7878c-f380-5577-cd69-00003d9e8fb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://98.252.87.232:48523/bin.sh","pattern":"[url:value = 'http://98.252.87.232:48523/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ba1a632-7d95-2df9-3267-00008a15fc1a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.38.136:39999/i","pattern":"[url:value = 'http://221.14.38.136:39999/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5890b118-c931-65e2-ca64-0000eb92bb83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.26.210.12:56867/i","pattern":"[url:value = 'http://36.26.210.12:56867/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ac03dd6-a988-ec72-644d-00008cfe86b8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://78.165.96.230:50272/i","pattern":"[url:value = 'http://78.165.96.230:50272/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22bb344a-7e8d-12b4-7c3d-00006ee2d469","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/5046321201/2K4xFEq.bat","pattern":"[url:value = 'http://62.60.226.140/files/5046321201/2K4xFEq.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bcfb89e-2873-c045-81de-0000243c2b5e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/dp.sh","pattern":"[url:value = 'http://194.238.57.124:889/dp.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--618c5bf5-d881-423c-3d23-0000fa38bf60","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.x64","pattern":"[url:value = 'http://194.238.57.124:889/pito.x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22a4b554-cb35-10a7-6d7e-0000d7cafeec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.ppc440","pattern":"[url:value = 'http://194.238.57.124:889/pito.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bec11fca-1ba6-a7e6-25e0-00004977aa3e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.sparc","pattern":"[url:value = 'http://194.238.57.124:889/pito.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ffb4ae4-61d2-a4d1-92c9-00007a64b1c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.arm4","pattern":"[url:value = 'http://194.238.57.124:889/pito.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cb32699-2c4e-2f11-f901-00009702a7ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.ppc","pattern":"[url:value = 'http://194.238.57.124:889/pito.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11011757-9fe9-8412-4ef2-0000ef01c98a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.x86","pattern":"[url:value = 'http://194.238.57.124:889/pito.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49e1c4ce-de88-c36d-3869-000017dc3e09","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.sh4","pattern":"[url:value = 'http://194.238.57.124:889/pito.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1f52bc8-05ac-c350-ec56-0000d06d794d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.arm6","pattern":"[url:value = 'http://194.238.57.124:889/pito.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ea63534-3653-5f86-376b-00004a90cc87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.m68k","pattern":"[url:value = 'http://194.238.57.124:889/pito.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96f21b5e-eda6-f448-a644-000068d11e28","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.arm7","pattern":"[url:value = 'http://194.238.57.124:889/pito.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--428a01e2-6dfb-712b-b60f-00004a661a5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.mips","pattern":"[url:value = 'http://194.238.57.124:889/pito.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78fc7a72-f0dd-573d-f6ff-0000c2d8d6a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.arm5","pattern":"[url:value = 'http://194.238.57.124:889/pito.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--941e8f2a-a390-262f-5490-000087b83feb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.i686","pattern":"[url:value = 'http://194.238.57.124:889/pito.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--979a5b44-abed-7153-22c7-0000ca709ee0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.i486","pattern":"[url:value = 'http://194.238.57.124:889/pito.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0618431c-32e7-ad07-10bf-000029729b2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.mipsel","pattern":"[url:value = 'http://194.238.57.124:889/pito.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad9d904c-dc00-fc76-6d5a-000072095444","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://98.252.87.232:48523/i","pattern":"[url:value = 'http://98.252.87.232:48523/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--529ef74a-d7f4-1d95-2716-0000c53184d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.74.33.126:60319/bin.sh","pattern":"[url:value = 'http://39.74.33.126:60319/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3ba651d-fa8e-0397-d7b9-0000d3b6b05e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.44.146.78:40164/i","pattern":"[url:value = 'http://27.44.146.78:40164/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f916cf22-f4aa-1372-77c8-00007709a909","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.194.211.108:59780/bin.sh","pattern":"[url:value = 'http://27.194.211.108:59780/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc8683c6-1a54-ffe9-d16d-00007521423d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.74.33.126:60319/i","pattern":"[url:value = 'http://39.74.33.126:60319/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dcad2f0-c5bf-8560-7af7-0000890dba60","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.39.1:58961/i","pattern":"[url:value = 'http://125.44.39.1:58961/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97fef9e1-7dcd-00f7-e1e9-0000c32d7a41","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.194.211.108:59780/i","pattern":"[url:value = 'http://27.194.211.108:59780/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb597bc9-ad7e-5fc5-47e7-0000b474a1f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.55.50:60411/bin.sh","pattern":"[url:value = 'http://182.116.55.50:60411/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bea550ed-0d02-4c1d-5eaf-0000494b0cd0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/5046321201/8EiMnJ7.exe","pattern":"[url:value = 'http://62.60.226.140/files/5046321201/8EiMnJ7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fbb9ce4-dbd7-0794-43d6-0000dbda92df","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.13.6:54335/bin.sh","pattern":"[url:value = 'http://123.11.13.6:54335/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e31ecc05-3be3-7547-99df-00006ffd2287","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.236.112:38216/bin.sh","pattern":"[url:value = 'http://115.55.236.112:38216/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be950735-cbf6-0a8c-515d-000019f29367","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.236.112:38216/i","pattern":"[url:value = 'http://115.55.236.112:38216/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a8a9ef8-50f1-3584-cfc1-0000ad0eaa36","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.13.6:54335/i","pattern":"[url:value = 'http://123.11.13.6:54335/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92fd90cc-1982-f514-dfed-0000de8e2ea3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://mitraperijinan.co.id/wp-content/uploads/2026/Updater.exe","pattern":"[url:value = 'https://mitraperijinan.co.id/wp-content/uploads/2026/Updater.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a092374c-0a89-6330-1bd8-000003f063f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.13.149.41:34202/bin.sh","pattern":"[url:value = 'http://218.13.149.41:34202/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d546336c-8361-ed16-73e5-0000de6ff6aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.13.149.41:34202/i","pattern":"[url:value = 'http://218.13.149.41:34202/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ac8abaa-9b02-3617-2715-0000f8d5b2a2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.173.72.28:43930/bin.sh","pattern":"[url:value = 'http://175.173.72.28:43930/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--928ddf40-aebd-f9c8-b88c-00001145eeb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.173.72.28:43930/i","pattern":"[url:value = 'http://175.173.72.28:43930/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b002974f-d9e6-4edd-d6fe-00005fbef212","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.190.249:52785/bin.sh","pattern":"[url:value = 'http://115.62.190.249:52785/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bad7a1b3-085e-db25-781b-00009cc5cf82","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.33.72:34879/i","pattern":"[url:value = 'http://182.113.33.72:34879/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f559244-1595-0c8c-bdb6-0000db932dce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.190.249:52785/i","pattern":"[url:value = 'http://115.62.190.249:52785/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95b9a47b-f3e4-c290-3e69-0000d404b04f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.253.62.1:52995/i","pattern":"[url:value = 'http://117.253.62.1:52995/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fbcb70c-e0f5-0eb7-aaf5-0000943f7b9d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.238.169.3:40436/bin.sh","pattern":"[url:value = 'http://42.238.169.3:40436/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ad604a0-616c-9325-aa34-000026d2aa01","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.238.169.3:40436/i","pattern":"[url:value = 'http://42.238.169.3:40436/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be2806f6-c156-209a-00c5-000026d0450e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.146.159.250:58407/bin.sh","pattern":"[url:value = 'http://175.146.159.250:58407/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b242265d-c8e8-403f-866e-0000cb1e5b67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.23.123.119:52447/bin.sh","pattern":"[url:value = 'http://60.23.123.119:52447/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38c23709-ece6-3be4-5bd4-00001eca7db1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.205.0.233:37221/bin.sh","pattern":"[url:value = 'http://221.205.0.233:37221/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c649340-d019-5895-1734-0000945fb4aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_arm5","pattern":"[url:value = 'http://31.77.227.121/satan_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdae08b6-943a-89c5-6cf5-0000cc12c316","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_00bdcc9da8206c4c.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_00bdcc9da8206c4c.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10f9b26a-cac0-e5de-0a54-0000a3a48dca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_ppc","pattern":"[url:value = 'http://31.77.227.121/satan_ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c56dc2fa-93ff-9a1f-8811-000086ea1b44","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_arm6","pattern":"[url:value = 'http://31.77.227.121/satan_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6612e8d0-6726-6321-5781-00001ce17854","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_mips","pattern":"[url:value = 'http://31.77.227.121/satan_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6271393b-cb1a-e2bb-21af-0000f5ce83ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/$b","pattern":"[url:value = 'http://31.77.227.134/bins/$b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d89334a8-9b5b-30fa-a051-0000f13178a7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_arm","pattern":"[url:value = 'http://31.77.227.121/satan_arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a3edc06-ac0c-fbce-a5a6-00001c17ae8e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_m68k","pattern":"[url:value = 'http://31.77.227.121/satan_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fd8734e-8e25-5b9e-fae3-0000026895a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_x86_64","pattern":"[url:value = 'http://31.77.227.121/satan_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cb83ff4-3d4d-5882-facf-0000dbdf8f0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_mips_el","pattern":"[url:value = 'http://31.77.227.121/satan_mips_el']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b26af26c-c9bb-7845-9357-00003e567c21","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_arm7","pattern":"[url:value = 'http://31.77.227.121/satan_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7632d6a3-8697-d63e-b980-000030fd95f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_sparc","pattern":"[url:value = 'http://31.77.227.121/satan_sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65ab503d-68b2-f092-4bf5-0000237a143c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_sh4","pattern":"[url:value = 'http://31.77.227.121/satan_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed971693-201b-3c5c-99f8-000079d0f0da","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.54.109/getit.exe","pattern":"[url:value = 'http://178.16.54.109/getit.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa446ab7-4b6c-31d9-2bb4-0000dac4ab65","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/gg11","pattern":"[url:value = 'http://194.238.57.124:889/gg11']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3509753-3a14-91d8-c653-0000cfe798cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.74.47.172:6407/linux","pattern":"[url:value = 'http://112.74.47.172:6407/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93edb27a-b0d2-8f57-9251-0000a558fa44","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_6a286233562894b3.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_6a286233562894b3.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dd3da97-073c-a34a-3bfa-00006827451d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.mips","pattern":"[url:value = 'http://18.236.12.51/bins/chud.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22d7d91b-a6f4-86d2-fac1-0000ac48303c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.x86","pattern":"[url:value = 'http://18.236.12.51/bins/chud.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f7f9faa-5ab6-eaac-7033-000016fa671f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.146.159.250:58407/i","pattern":"[url:value = 'http://175.146.159.250:58407/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6f18fad-6cf8-6be2-bf14-00005377cd55","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://c2.11179669.cloud/ChromeReal.exe","pattern":"[url:value = 'https://c2.11179669.cloud/ChromeReal.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a2a2e49-b037-5593-a346-00005b813391","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://c2.11179669.cloud/edgeupd.dat","pattern":"[url:value = 'https://c2.11179669.cloud/edgeupd.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6f95805-fc80-5f63-c1b4-000044be1a17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://88.232.49.106:60233/bin.sh","pattern":"[url:value = 'http://88.232.49.106:60233/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bae844e-92be-14ab-56a6-0000e0f3364f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.215.210.140:47517/bin.sh","pattern":"[url:value = 'http://27.215.210.140:47517/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9faaa1d2-4e16-69d0-a3d3-0000fb646331","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.23.123.119:52447/i","pattern":"[url:value = 'http://60.23.123.119:52447/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a6ab24c-be1b-82c9-fe53-0000f66275fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.205.0.233:37221/i","pattern":"[url:value = 'http://221.205.0.233:37221/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5500a14b-e9a5-3b04-0daf-00003fa5aa72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.215.210.140:47517/i","pattern":"[url:value = 'http://27.215.210.140:47517/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b099d78-eab1-e74f-1e45-000013a730ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://88.232.49.106:60233/i","pattern":"[url:value = 'http://88.232.49.106:60233/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af00a491-8923-9df7-acfe-0000c2ccee2b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://www.artleadsdigital.com/logs.py","pattern":"[url:value = 'http://www.artleadsdigital.com/logs.py']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3550aa9-92a5-d70f-969b-0000c3316e03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://www.artleadsdigital.com/payloadencrypted.bin","pattern":"[url:value = 'https://www.artleadsdigital.com/payloadencrypted.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f741699-419a-a360-6dce-00004d44c6bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://www.artleadsdigital.com/logs.bat","pattern":"[url:value = 'http://www.artleadsdigital.com/logs.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ef169ca-ee74-80a1-ab8c-000016cb44c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://tattinamecheap.com/QuickFetch.exe","pattern":"[url:value = 'https://tattinamecheap.com/QuickFetch.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c134b4a0-bb74-294a-157a-00008c138706","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.2.164:47376/bin.sh","pattern":"[url:value = 'http://123.13.2.164:47376/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49df976d-e43f-b0d1-bf33-00009c15ce0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.172.144:33777/bin.sh","pattern":"[url:value = 'http://222.137.172.144:33777/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a48cb74e-c373-f537-f42a-0000c1f812b4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.252.25:32934/bin.sh","pattern":"[url:value = 'http://59.97.252.25:32934/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6926b946-6e4c-8c05-b160-0000676b24b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.85.41:50026/i","pattern":"[url:value = 'http://27.215.85.41:50026/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c70f6e17-7dec-692e-7bb4-000086deab24","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.arm","pattern":"[url:value = 'http://18.236.12.51/bins/chud.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88011c5e-0f8c-0b20-6f4d-000003242b57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.mpsl","pattern":"[url:value = 'http://18.236.12.51/bins/chud.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a370a82-7708-8ee4-8e24-00005495c7bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.sh4","pattern":"[url:value = 'http://18.236.12.51/bins/chud.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a5a107-cee5-82a2-f87e-0000e09989e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.arm5","pattern":"[url:value = 'http://18.236.12.51/bins/chud.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20b74310-f6f0-db12-77da-00006601dc17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.arc","pattern":"[url:value = 'http://18.236.12.51/bins/chud.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f65e8d5-ec8f-5e3e-c3e4-0000d44b5e49","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.ppc","pattern":"[url:value = 'http://18.236.12.51/bins/chud.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6837a0cd-5b66-bc6a-f736-00007bbb5933","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.x86_64","pattern":"[url:value = 'http://18.236.12.51/bins/chud.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9abc02b-0d8c-9c3c-6c3c-00004a904168","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.arm7","pattern":"[url:value = 'http://18.236.12.51/bins/chud.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eacf0bd-a0f1-eaff-3bba-0000f22c260d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.arm6","pattern":"[url:value = 'http://18.236.12.51/bins/chud.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71ffee41-29c1-0b47-f212-000068d193c7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.m68k","pattern":"[url:value = 'http://18.236.12.51/bins/chud.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb24f42c-1481-8ad2-c690-000089f23af9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.246.145:56603/bin.sh","pattern":"[url:value = 'http://219.157.246.145:56603/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c138b81-6218-cdd9-d211-00004848344b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.aarch64","pattern":"[url:value = 'http://167.86.99.169/iran.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7a30dbc-b802-4eb8-7bb4-0000c243ce12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.252.25:32934/i","pattern":"[url:value = 'http://59.97.252.25:32934/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b377b685-d672-9a0c-fcd2-00006f7671d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.172.144:33777/i","pattern":"[url:value = 'http://222.137.172.144:33777/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d14ed9c-131c-5260-98ee-0000f1755dab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.94.7:42242/bin.sh","pattern":"[url:value = 'http://115.49.94.7:42242/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d982f200-f372-f90b-ed93-0000d14a2444","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.115.85.248:45790/bin.sh","pattern":"[url:value = 'http://180.115.85.248:45790/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa7ccc34-54b8-8a25-c6a2-0000e9e8ad4d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.94.7:42242/i","pattern":"[url:value = 'http://115.49.94.7:42242/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--820b0806-fb15-182c-e809-0000aff06a1e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.115.85.248:45790/i","pattern":"[url:value = 'http://180.115.85.248:45790/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39402dbb-4269-546a-1f8f-00006b8b4f19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.140.140:55161/bin.sh","pattern":"[url:value = 'http://59.96.140.140:55161/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e5ccf79-ca1d-4dd9-24cb-000081e9c0b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://drive.google.com/uc?export=download&id=1mVI9h_rV6mptfRqbC3cDNiyfurIAq2tQ","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1mVI9h_rV6mptfRqbC3cDNiyfurIAq2tQ']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77150455-729b-b364-6526-000097b0886d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.119.188:36580/bin.sh","pattern":"[url:value = 'http://182.126.119.188:36580/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83d195cb-ede3-6b44-f43a-0000946ea091","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://58.47.120.247:39556/i","pattern":"[url:value = 'http://58.47.120.247:39556/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--729c76a3-f2de-6923-5fd9-0000af94a7fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/KMcrypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/KMcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d18b9d5-895d-ff63-16e7-0000595f3f8f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/OKcrypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/OKcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a84f2db7-5fad-d9fd-e0e7-0000f22eab7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/u9crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/u9crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ebdccba-40a4-306b-b2f6-0000ee206975","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/21crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/21crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad6345f5-4184-7b62-95cf-00001ecc7f9a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/a2crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/a2crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f94ccc25-5e4f-45c8-d9f2-0000d2d554a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/kk2crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/kk2crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73650c25-40e3-c2c5-47a4-00005b9d1b0d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/K15crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/K15crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac3a0561-fce6-18b0-d93c-00000618c9e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/E32crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/E32crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7628eff0-223d-1223-23fe-0000ade171d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/mycrypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/mycrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ed21ed5-69e6-ab28-555a-0000c3a83edc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/kk1crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/kk1crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dafd9705-5fa9-f2a9-a290-00000fb115e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/a1crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/a1crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31fe1e7b-28cd-019d-f91c-0000229622ea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://crazypianoswebshop.nl/vFRywuNACNkFcQY.exe","pattern":"[url:value = 'https://crazypianoswebshop.nl/vFRywuNACNkFcQY.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83b40353-044f-df09-6de2-00007dadf192","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://drive.google.com/uc?export=download&id=1U-4hfA9iI1EWW1MKtVpCi878-B9RhvGA","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1U-4hfA9iI1EWW1MKtVpCi878-B9RhvGA']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9fc272b-38a4-f342-bdb5-0000aea0e024","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://drive.google.com/uc?export=download&id=1zDAuolFaqf-s5nc96PTj-NMi5vlJTvMM","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1zDAuolFaqf-s5nc96PTj-NMi5vlJTvMM']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d860f36-0478-325e-9ccf-000057d3e61b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.213.18:32896/bin.sh","pattern":"[url:value = 'http://120.84.213.18:32896/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f335026-8785-b43b-5d2b-0000cddd4321","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.156.149:50285/bin.sh","pattern":"[url:value = 'http://222.140.156.149:50285/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed6992eb-03c4-32ad-e81c-000026d84b66","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://teakivo.com//wp-content/bin.exe","pattern":"[url:value = 'https://teakivo.com//wp-content/bin.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0679d0e2-2711-becb-0cff-0000f6f14de1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://sunix-technology.com/images/litxwnimg_082224.png","pattern":"[url:value = 'https://sunix-technology.com/images/litxwnimg_082224.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44308ea1-80b9-d8aa-629f-0000af15f7d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://sunix-technology.com/images/MSI_PRO.png","pattern":"[url:value = 'https://sunix-technology.com/images/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7425049-f87a-b484-a377-0000a9548ece","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://winds11.site/Setup.rar","pattern":"[url:value = 'https://winds11.site/Setup.rar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7259107-7ff8-1bcb-d2c0-0000d2673c80","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.1.44:45185/bin.sh","pattern":"[url:value = 'http://125.41.1.44:45185/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d410851a-f154-a9c0-66e5-0000be841fb6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.156.149:50285/i","pattern":"[url:value = 'http://222.140.156.149:50285/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--793d7cd0-ac5f-f256-60d2-0000a21d0a0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://bmpincorporated.com/dubl2/dubl22allremriki/fls/ato15.zip","pattern":"[url:value = 'https://bmpincorporated.com/dubl2/dubl22allremriki/fls/ato15.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfaf3827-1c81-eb6f-2b29-0000988217f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://bmpincorporated.com/dubl2/dubl22allremriki/Ldrdubl2132.exe","pattern":"[url:value = 'https://bmpincorporated.com/dubl2/dubl22allremriki/Ldrdubl2132.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75cb2b60-9ddf-8963-e9f5-0000c66768aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.1.44:45185/i","pattern":"[url:value = 'http://125.41.1.44:45185/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffe797da-b163-0a21-0d41-000074069eb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://baileyemas.com/vlc.zip","pattern":"[url:value = 'https://baileyemas.com/vlc.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c2e538b-6c4a-866b-c418-00005456b28b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.157.90:46817/bin.sh","pattern":"[url:value = 'http://105.184.157.90:46817/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca07fb0e-b362-473f-cf5c-000097c4c5bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.232.226.68:57370/i","pattern":"[url:value = 'http://112.232.226.68:57370/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3205ac62-bfc0-ea76-3421-0000cdfd5db8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.28.151:38320/bin.sh","pattern":"[url:value = 'http://115.49.28.151:38320/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62cadd80-81f3-0911-315a-00005a64ceb0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/r","pattern":"[url:value = 'http://31.77.227.102/r']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cfd8af1-67e5-936d-7622-00004210a275","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/jaws.sh","pattern":"[url:value = 'http://31.77.227.102/jaws.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67443ed4-0cb2-cdf9-28d6-00004e8246d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/dl","pattern":"[url:value = 'http://31.77.227.102/dl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b09b55ba-9500-c6a2-f2b5-00009caedd05","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/routerip.sh","pattern":"[url:value = 'http://31.77.227.102/routerip.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71a645d6-721b-07a5-3ec9-0000cfc9b1c0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/j","pattern":"[url:value = 'http://31.77.227.102/j']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f2103cd-8249-341b-5d19-00000a4503bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.86.128.27:34669/i","pattern":"[url:value = 'http://42.86.128.27:34669/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--112891cc-848f-7384-e46e-0000312c393a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.172:59900/bin.sh","pattern":"[url:value = 'http://210.208.110.172:59900/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--852b410f-c16d-3616-3867-0000baf48512","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.171.163:58015/bin.sh","pattern":"[url:value = 'http://182.121.171.163:58015/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e42f5df-a5ad-aec3-b20e-000083ba02f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.177.244.198:55825/bin.sh","pattern":"[url:value = 'http://60.177.244.198:55825/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca3ccf93-8f89-746c-ff67-0000682ef4cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/pmips","pattern":"[url:value = 'http://31.77.227.134/bins/pmips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8fb5f17-8a88-1800-6d68-0000fa539afc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.58.252.41:50980/bin.sh","pattern":"[url:value = 'http://42.58.252.41:50980/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2debcecc-bac1-9822-f7fb-00000e62eb97","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.37.102.157:50864/i","pattern":"[url:value = 'http://27.37.102.157:50864/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e839c7f-28ac-4c7e-d231-0000029e7d41","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.212.173.225:35221/bin.sh","pattern":"[url:value = 'http://66.212.173.225:35221/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7d1f7e4-78d4-a831-b36d-0000f0b4a84d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.59.31.160:24414/s/linux","pattern":"[url:value = 'http://194.59.31.160:24414/s/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--724a26a3-8435-7544-c5c4-00007a9f8d4f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.159.117:41888/bin.sh","pattern":"[url:value = 'http://42.239.159.117:41888/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1074f661-745d-f57e-f35c-0000a8ed17b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.232.181.83:55625/i","pattern":"[url:value = 'http://42.232.181.83:55625/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc01f284-517e-527a-2216-000043c745e7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.23.194.206:50377/bin.sh","pattern":"[url:value = 'http://60.23.194.206:50377/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56f6715f-7126-3b64-570e-0000f16c33eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.78.12.145:45921/i","pattern":"[url:value = 'http://37.78.12.145:45921/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--541b1d3d-de51-a1fc-2fa2-0000adcc96c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.245.28.97:40240/bin.sh","pattern":"[url:value = 'http://182.245.28.97:40240/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c4ae7fc-cad9-5fe9-a20a-0000cf9e02d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://79.135.225.50:13477/.i","pattern":"[url:value = 'http://79.135.225.50:13477/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dc01576-8f26-3f23-7887-000008db75d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://122.139.14.243:51081/i","pattern":"[url:value = 'http://122.139.14.243:51081/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66756c60-4401-affd-5295-000055862ff0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bash.sh","pattern":"[url:value = 'http://132.243.200.43/nullnet_bash.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80610f18-5e76-a5eb-e9dc-00005b6efae7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/pspc","pattern":"[url:value = 'http://31.77.227.134/bins/pspc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6fbc277-1a27-ec95-0c51-0000766ba5c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.60.200.162:56430/i","pattern":"[url:value = 'http://115.60.200.162:56430/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45b7b821-61a8-d9fd-e780-0000b4e06ba3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.ppc","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fcd50d0-f720-4392-41dd-0000269193a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.79.195.66:54804/bin.sh","pattern":"[url:value = 'http://39.79.195.66:54804/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47f10678-5426-15b7-b1a5-00003274190d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.spc","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7152ec4-6619-0a4d-8dc6-0000040a9652","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.12.6:38860/i","pattern":"[url:value = 'http://221.15.12.6:38860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb650a14-dfaf-bb31-4831-0000286e3394","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.m68k","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87493ec2-616a-5ed5-ca17-00002898e54e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.mips","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3665b8bf-8cdd-178e-176b-00002bb04dd2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://111.61.92.78:58321/i","pattern":"[url:value = 'http://111.61.92.78:58321/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a478f628-2c7a-a5d8-ac8f-0000de10ed67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.178.149.31:33483/bin.sh","pattern":"[url:value = 'http://119.178.149.31:33483/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fa778e6-c7f9-5dfc-6518-0000f64d2c86","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.59.69:53574/bin.sh","pattern":"[url:value = 'http://115.55.59.69:53574/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34c7f3fa-6762-fb1c-8d62-000076b456f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.232.236.105:33973/i","pattern":"[url:value = 'http://42.232.236.105:33973/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--570e850c-db00-06b7-eaa2-00005c20fd94","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.246.143:47843/bin.sh","pattern":"[url:value = 'http://182.121.246.143:47843/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab677755-3471-2bb1-eda9-00002da9b294","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.141.218:40057/i","pattern":"[url:value = 'http://61.53.141.218:40057/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13e47e0a-2f13-4c34-4537-0000ef3ab272","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.109.138:53378/bin.sh","pattern":"[url:value = 'http://125.41.109.138:53378/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30e55a76-c8d3-847b-4e57-0000343ef255","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.sh4","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2282222d-38c8-f34d-ae2f-000060e73413","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://72.29.46.195:43633/i","pattern":"[url:value = 'http://72.29.46.195:43633/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2fe5034-08ac-bf5d-7faf-000037aa8a0f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.78.12.145:45921/bin.sh","pattern":"[url:value = 'http://37.78.12.145:45921/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ecf4763-200a-cd5d-e39d-00000a0436ba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.106.217:44114/bin.sh","pattern":"[url:value = 'http://125.43.106.217:44114/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e44d52f-4024-f5e3-4c8b-00004a99f0be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/parm7","pattern":"[url:value = 'http://31.77.227.134/bins/parm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eab8e89-acd8-258f-70c9-0000fe96aa2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.81.188:52368/i","pattern":"[url:value = 'http://123.9.81.188:52368/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e497e4ba-1a9a-7dbf-6ef0-000068c60e83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.229.134:40628/bin.sh","pattern":"[url:value = 'http://222.139.229.134:40628/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40560bfc-d9dc-4d9b-33b5-00002954e250","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.245.28.97:40240/i","pattern":"[url:value = 'http://182.245.28.97:40240/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9cc9221-e1d5-2752-7696-00001c5c0f83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.81.188:52368/bin.sh","pattern":"[url:value = 'http://123.9.81.188:52368/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a164e215-d628-a40e-0c7e-0000c80c10bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.162.45:41328/bin.sh","pattern":"[url:value = 'http://115.54.162.45:41328/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99e44a53-95fe-7ba0-9d28-0000377d5430","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.109.138:53378/i","pattern":"[url:value = 'http://125.41.109.138:53378/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5a4d3d9-91c1-f304-9933-00000d80ba89","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.136.40.34:41510/i","pattern":"[url:value = 'http://110.136.40.34:41510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39e7d40c-b51b-44ef-ff22-00002656cb33","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.73.173:58794/i","pattern":"[url:value = 'http://115.49.73.173:58794/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61541e15-60a1-77ff-4657-000056dc8e66","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.218.53:49708/bin.sh","pattern":"[url:value = 'http://42.230.218.53:49708/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c00010a-a33b-e807-11ea-0000e0faf145","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.68.3:50876/i","pattern":"[url:value = 'http://115.50.68.3:50876/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1cee274-44ca-e7ac-5b87-0000b71afb0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.214.70:35378/i","pattern":"[url:value = 'http://120.84.214.70:35378/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5af003e1-bcba-9fe5-04f7-0000cac65ebc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.86.128.27:34669/bin.sh","pattern":"[url:value = 'http://42.86.128.27:34669/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53ea38a9-5bf4-82b3-781d-0000759f948f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.153.225:57640/i","pattern":"[url:value = 'http://123.5.153.225:57640/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1af9c557-bdc5-9f73-f6a3-0000ef691432","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.246.143:47843/i","pattern":"[url:value = 'http://182.121.246.143:47843/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9a07c22-1229-b744-1ab3-00009ae3429b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.85.41:50026/bin.sh","pattern":"[url:value = 'http://27.215.85.41:50026/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d85d007b-21b3-b45e-4df7-0000b908ef8e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.120.242:36425/i","pattern":"[url:value = 'http://222.141.120.242:36425/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e77acea-89a6-d605-5cb5-00009cd0079c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.40.180.63:47173/i","pattern":"[url:value = 'http://39.40.180.63:47173/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--089c9527-0b97-1c49-934f-00003cfbb4f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.x86_64","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--680589ef-e56c-9481-59fd-0000cce305d6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.x86","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01012c8f-87d7-7c33-a97e-00005029422a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.31.114:44907/i","pattern":"[url:value = 'http://182.113.31.114:44907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd1e5d23-63cb-2d87-0fc9-00003b67a3d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.54.8.116:37031/bin.sh","pattern":"[url:value = 'http://42.54.8.116:37031/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe4237ef-cb6d-dad6-4385-00005e1d5245","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.58.130.128:38469/i","pattern":"[url:value = 'http://113.58.130.128:38469/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ef5c6ce-3930-6c64-44d6-00003f3088a1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.7.157.56:57185/i","pattern":"[url:value = 'http://27.7.157.56:57185/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41537338-954a-9907-aeff-0000287edbbc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.252.154:39030/bin.sh","pattern":"[url:value = 'http://222.142.252.154:39030/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3675fb05-f54f-61cd-66ee-0000259a3ab6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.237.83.89:55341/bin.sh","pattern":"[url:value = 'http://42.237.83.89:55341/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54347593-7288-5f36-eb94-000078df3a55","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.162.45:41328/i","pattern":"[url:value = 'http://115.54.162.45:41328/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8227b141-4ce5-9162-bdf1-0000ddfa8849","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/pppc","pattern":"[url:value = 'http://31.77.227.134/bins/pppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85397897-599c-6204-f3e0-0000b4c990a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.237.83.89:55341/i","pattern":"[url:value = 'http://42.237.83.89:55341/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd3f4552-c486-aab6-697b-0000a02629b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm5","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--237dfcad-9049-2a09-4ec8-0000b36b288e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.18.84.125:39736/i","pattern":"[url:value = 'http://60.18.84.125:39736/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d86da3ba-4206-51c9-bf1a-00008a96cc7f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.184.10.103/syss","pattern":"[url:value = 'http://61.184.10.103/syss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7755316-8ac7-f978-48be-00005d2411bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/psh4","pattern":"[url:value = 'http://31.77.227.134/bins/psh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--243614e8-c20b-9fe4-75e7-0000b293865e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm6","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0afb8855-c2b6-bcd9-2594-000047349028","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.153.54:53457/i","pattern":"[url:value = 'http://222.137.153.54:53457/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20b0eb23-1bf7-d3ff-4c79-0000b896249c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.252.154:39030/i","pattern":"[url:value = 'http://222.142.252.154:39030/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36d6415e-89a9-f905-21b2-000014864f87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.28.151:38320/i","pattern":"[url:value = 'http://115.49.28.151:38320/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd3d3571-c22f-7931-4890-00005b1cc9b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.184.10.103/amd","pattern":"[url:value = 'http://61.184.10.103/amd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a6513e4-c9c0-220d-d87c-000006aae9fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.arc","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65397701-780a-8e9e-edd4-0000cacf48c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.146.92.46:56049/bin.sh","pattern":"[url:value = 'http://117.146.92.46:56049/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3511194d-7c11-0071-6bf2-00007d84d2e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.120.242:36425/bin.sh","pattern":"[url:value = 'http://222.141.120.242:36425/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88f3ff3c-5471-23cf-eac3-00006e970706","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.232.181.83:55625/bin.sh","pattern":"[url:value = 'http://42.232.181.83:55625/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b53c3b1-84d1-57d5-d550-0000225f55c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.130:49996/bin.sh","pattern":"[url:value = 'http://210.208.110.130:49996/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5c5b898-5403-8113-b9d1-0000c064beac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.106.217:44114/i","pattern":"[url:value = 'http://125.43.106.217:44114/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6215f19-97f5-468b-0e2d-000096cb8c52","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.130.28:43450/i","pattern":"[url:value = 'http://196.189.130.28:43450/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61963dac-762e-f680-4bfa-000057909f04","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.178.149.31:33483/i","pattern":"[url:value = 'http://119.178.149.31:33483/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d65a194-6d51-434f-4ac3-000084a84d60","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.137.198.130:51494/i","pattern":"[url:value = 'http://61.137.198.130:51494/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91b3c650-46bd-2daa-82b7-00005702f971","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.238.108.90:47368/i","pattern":"[url:value = 'http://112.238.108.90:47368/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5331247e-057f-565f-5496-00000a2fe13b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm7","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8610fb45-dd26-818f-a6dd-000068d82211","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/pm68k","pattern":"[url:value = 'http://31.77.227.134/bins/pm68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e804b92d-43c1-5167-ee58-0000f689411d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.87.111.88:33491/i","pattern":"[url:value = 'http://42.87.111.88:33491/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2ca5344-f5f8-cc48-7cf0-000069c24529","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.33.72:34879/bin.sh","pattern":"[url:value = 'http://182.113.33.72:34879/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--329bf80b-792c-d5f7-f8b0-0000439b8b04","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.mpsl","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fee095a-fea3-31f5-0ad2-0000032d9a81","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/pmpsl","pattern":"[url:value = 'http://31.77.227.134/bins/pmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b095e86e-aedd-0a00-bf91-0000a0fdbd1b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.60.200.162:56430/bin.sh","pattern":"[url:value = 'http://115.60.200.162:56430/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a5f273d-3899-5117-1af8-0000f9d4cd67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.79.195.66:54804/i","pattern":"[url:value = 'http://39.79.195.66:54804/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68021fa4-27d1-1956-e9f9-00000953dfc8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.38.255:44908/i","pattern":"[url:value = 'http://125.43.38.255:44908/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f47daf53-606f-a23d-b34e-00009da77814","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.194.30:35812/bin.sh","pattern":"[url:value = 'http://120.28.194.30:35812/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--597aeb1a-14ec-b40c-1ee8-0000e89dd154","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.59.69:53574/i","pattern":"[url:value = 'http://115.55.59.69:53574/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--311d889c-22ba-f9a0-4da1-000090237a91","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://78.29.39.213:56148/i","pattern":"[url:value = 'http://78.29.39.213:56148/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7107359-c2de-330e-9240-00008ebe6a27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.68.3:50876/bin.sh","pattern":"[url:value = 'http://115.50.68.3:50876/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ff8f7a9-8e22-3739-a4c5-0000ca442e8a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.54.8.116:37031/i","pattern":"[url:value = 'http://42.54.8.116:37031/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e72c9b4-7465-f313-89f6-000092126f2b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://202.163.107.242:56229/i","pattern":"[url:value = 'http://202.163.107.242:56229/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8103f53f-9113-954d-c5c6-00002b83a3c0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.105.253:46499/i","pattern":"[url:value = 'http://222.137.105.253:46499/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40ad86a6-87b5-99e0-41f1-0000ec3d84a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://120.71.0.131:9935/linux","pattern":"[url:value = 'http://120.71.0.131:9935/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2481e4f6-096a-3386-a19d-0000e592cfb6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.105.253:46499/bin.sh","pattern":"[url:value = 'http://222.137.105.253:46499/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52596464-98cd-57a8-e29b-0000a88e61f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.i486","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30da26d2-5893-6c3b-f7de-0000dfa31c2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.242.40:51278/i","pattern":"[url:value = 'http://182.126.242.40:51278/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8441bfa2-0ea5-bfd5-7f48-00004c0c0f55","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.159.98.16/daemonc","pattern":"[url:value = 'http://94.159.98.16/daemonc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--636f0ead-b1fc-7255-7504-00006658dab9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.17.34.84:34056/i","pattern":"[url:value = 'http://60.17.34.84:34056/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c35fc90f-7c59-500b-6a98-00001ec62232","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.107.97:43395/bin.sh","pattern":"[url:value = 'http://61.53.107.97:43395/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebdd4c2f-8ee3-f95a-2f8f-000063c9eaf8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.153.225:57640/bin.sh","pattern":"[url:value = 'http://123.5.153.225:57640/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d09c6d4-6188-a980-4408-00009a8a1073","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.190.17.0:42140/i","pattern":"[url:value = 'http://123.190.17.0:42140/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4381cb14-188d-12ad-2057-00005de8f372","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.59.204.16:37885/bin.sh","pattern":"[url:value = 'http://42.59.204.16:37885/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ddd3ee3-326e-5233-3239-0000e6759ece","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51ddb00a-6377-028e-7508-0000e546c0f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.i686","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d27d773-2839-9348-0db3-0000c9b27549","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.8.135.142:41648/bin.sh","pattern":"[url:value = 'http://66.8.135.142:41648/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52bf48bf-bb34-eef2-fce9-0000590a97c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.157.90:46817/i","pattern":"[url:value = 'http://105.184.157.90:46817/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ec31238-7431-d258-b1f8-0000a4971271","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.146.92.46:56049/i","pattern":"[url:value = 'http://117.146.92.46:56049/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bb6cae8-3cf6-53aa-b6c8-00004090ed80","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.253.184:44790/bin.sh","pattern":"[url:value = 'http://221.15.253.184:44790/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af1f3eca-4230-16ad-f113-0000a483401f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.11.240:40642/bin.sh","pattern":"[url:value = 'http://221.15.11.240:40642/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--024707cd-aed1-38d0-93e8-0000caf8024b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.8.135.142:41648/i","pattern":"[url:value = 'http://66.8.135.142:41648/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b8b1954-8c6c-71e9-ef2f-00007ea930e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://114.221.254.230:54765/bin.sh","pattern":"[url:value = 'http://114.221.254.230:54765/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68e89bf4-2bbb-761e-dff1-00007adfa751","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.253.184:44790/i","pattern":"[url:value = 'http://221.15.253.184:44790/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37bed72c-cf44-bc92-3746-00002781374e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.144.191:50908/i","pattern":"[url:value = 'http://115.48.144.191:50908/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f321138e-9cff-bc01-8590-0000325b221b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.7.241.28:50935/bin.sh","pattern":"[url:value = 'http://123.7.241.28:50935/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92948ddd-29b6-fe6a-b32b-000008685204","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.27.152:52881/i","pattern":"[url:value = 'http://105.184.27.152:52881/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--006ac580-4d84-848e-5476-00000ea9f563","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.240.9.116:57352/bin.sh","pattern":"[url:value = 'http://182.240.9.116:57352/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5960819f-bcce-480f-fdc6-00006d137268","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.10.180:53804/bin.sh","pattern":"[url:value = 'http://115.55.10.180:53804/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adef1928-fc94-1488-7bfa-0000699d04aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.7.241.28:50935/i","pattern":"[url:value = 'http://123.7.241.28:50935/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--504fd149-f2a9-2b53-1689-0000f57d5bee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.173.11:52595/i","pattern":"[url:value = 'http://42.224.173.11:52595/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3191bf0-692e-9280-9272-00008cef55e7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.59.34.198:49461/bin.sh","pattern":"[url:value = 'http://115.59.34.198:49461/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--522e4b8a-5525-8766-f456-0000d78f40ab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://114.221.254.230:54765/i","pattern":"[url:value = 'http://114.221.254.230:54765/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f576b9a-af6f-1af4-d048-000077f40efc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.174.13:45439/bin.sh","pattern":"[url:value = 'http://115.56.174.13:45439/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05d132bf-fed1-0e38-6db5-000026d04ab5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.11.240:40642/i","pattern":"[url:value = 'http://221.15.11.240:40642/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--637d56f1-8e7b-8b4d-7ddc-00008225ab79","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_ae0cbdb600ff92fa.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_ae0cbdb600ff92fa.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7b66d39-df14-beb4-6b3f-00002d9d9815","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_b8afcc5c4d1ea78e.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_b8afcc5c4d1ea78e.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0172a42f-1967-156a-8e74-0000b3072d8f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.10.180:53804/i","pattern":"[url:value = 'http://115.55.10.180:53804/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cceeb38-b324-9fee-5cf7-00001f58343a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.112.59.94:60395/bin.sh","pattern":"[url:value = 'http://125.112.59.94:60395/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb30c5df-7e81-2337-e32b-0000e2f724ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.157.224:54842/bin.sh","pattern":"[url:value = 'http://175.148.157.224:54842/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3221481e-3de8-eb54-473c-000096071eb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.59.34.198:49461/i","pattern":"[url:value = 'http://115.59.34.198:49461/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4c30d0f-f38b-ed95-2a69-000048e9ef30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.174.13:45439/i","pattern":"[url:value = 'http://115.56.174.13:45439/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70b8e631-49cf-f8c2-05de-00001c41a5ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.143.200:56878/i","pattern":"[url:value = 'http://59.96.143.200:56878/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1289704e-bb12-7a26-8c5f-00003529a704","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.27.234:57981/bin.sh","pattern":"[url:value = 'http://125.42.27.234:57981/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ad7fc21-513f-02bc-bdb7-00006d478025","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.193.225:54553/bin.sh","pattern":"[url:value = 'http://115.55.193.225:54553/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fb63466-0ed2-d366-b864-0000210417fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.143.40:35243/i","pattern":"[url:value = 'http://115.48.143.40:35243/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0cd897a-d692-a220-fdec-0000a2843597","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.107.209.203:44599/bin.sh","pattern":"[url:value = 'http://175.107.209.203:44599/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cf6b408-9761-71a1-3b07-00002e12280f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.27.234:57981/i","pattern":"[url:value = 'http://125.42.27.234:57981/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4016593f-8e93-3eec-b64d-000044ecb40f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.157.224:54842/i","pattern":"[url:value = 'http://175.148.157.224:54842/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23c35056-c818-1999-afc9-00002491d9d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://mkconstructions.net/ofiltytuerutyueiioo/Docusign-8901123adobe-reader07zuillnirusi.bat","pattern":"[url:value = 'https://mkconstructions.net/ofiltytuerutyueiioo/Docusign-8901123adobe-reader07zuillnirusi.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a896049-78a9-531b-427b-00007aa4a398","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://centrodolce.screenconnect.com/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest","pattern":"[url:value = 'https://centrodolce.screenconnect.com/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59dfc8e2-1326-7819-8c87-00004b5fd33a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.193.225:54553/i","pattern":"[url:value = 'http://115.55.193.225:54553/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fea46145-b2dc-d195-8260-00002f7a376c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.55.72.18:38032/bin.sh","pattern":"[url:value = 'http://116.55.72.18:38032/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74f6ff70-a0ee-31d7-9f2e-0000677d87d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.76.176:57084/i","pattern":"[url:value = 'http://222.139.76.176:57084/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a6122b0-a419-b947-ab61-0000ac2fac0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.171.163:58015/i","pattern":"[url:value = 'http://182.121.171.163:58015/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f0bb8e0-c578-27a4-8417-0000e65a6819","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.232.236.105:33973/bin.sh","pattern":"[url:value = 'http://42.232.236.105:33973/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d8d896b-9300-b5c5-c2ce-0000c9bcbded","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.55.72.18:38032/i","pattern":"[url:value = 'http://116.55.72.18:38032/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52e7fe02-5c0e-83b8-8c16-000043a32a7a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.17.83.99:51270/bin.sh","pattern":"[url:value = 'http://60.17.83.99:51270/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3e8c252-d4a1-78c0-7da9-0000cc536055","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://79.106.74.167:44091/bin.sh","pattern":"[url:value = 'http://79.106.74.167:44091/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3d8dcbe-468c-df78-6a75-00009e3346b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.12.214:51034/bin.sh","pattern":"[url:value = 'http://219.155.12.214:51034/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--724bd93e-b062-5ead-a0b0-00006b776b08","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://193.26.115.227/bin/support.client.exe","pattern":"[url:value = 'https://193.26.115.227/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66847f31-61a7-5a1c-4c82-000093ade86f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://193.26.115.227/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://193.26.115.227/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d979727-d5eb-29b1-3502-0000991f0f6c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.52.133/bin/support.client.exe","pattern":"[url:value = 'http://178.16.52.133/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b8f378c-735a-c65d-e27e-0000f1599954","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.52.133/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://178.16.52.133/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--330fdd3e-8cb5-f1ef-6996-00007eaa2bc4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.ppc","pattern":"[url:value = 'http://176.65.139.133/nz/nz.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dca3059a-b555-62a8-54ac-0000365a7e43","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.i686","pattern":"[url:value = 'http://176.65.139.133/nz/nz.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfe54d9b-e55d-6a6d-fe04-0000908735bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.mpsl","pattern":"[url:value = 'http://176.65.139.133/nz/nz.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c644f166-0f55-9f8d-e0b6-0000c43aa78f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/debug","pattern":"[url:value = 'http://176.65.139.133/nz/debug']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2d6d540-4009-9c66-4ca7-000017138e17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.x86_64","pattern":"[url:value = 'http://176.65.139.133/nz/nz.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ebdecf0-075f-e9be-07ea-000006a945b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.x86","pattern":"[url:value = 'http://176.65.139.133/nz/nz.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a378b52-b92c-4ebc-ffc8-0000fb845bf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.mips","pattern":"[url:value = 'http://176.65.139.133/nz/nz.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3041f0c2-8f33-e0ed-491e-0000733a970b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.arm5","pattern":"[url:value = 'http://176.65.139.133/nz/nz.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de4f91ee-2924-c289-2a05-0000d9335f80","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.arm7","pattern":"[url:value = 'http://176.65.139.133/nz/nz.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cdd76fb-f93b-c62d-cb85-0000cce0a99a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.arc","pattern":"[url:value = 'http://176.65.139.133/nz/nz.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb655bfc-5f12-7399-b31a-00002c3fdea9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.arm","pattern":"[url:value = 'http://176.65.139.133/nz/nz.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b842f81-b1a1-bfb2-1af6-0000ec484b36","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz.sh","pattern":"[url:value = 'http://176.65.139.133/nz.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--465d3f69-f531-eeac-1e05-0000fe74b232","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.sh4","pattern":"[url:value = 'http://176.65.139.133/nz/nz.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31496367-2b91-1d09-1cb6-0000f83e596a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.spc","pattern":"[url:value = 'http://176.65.139.133/nz/nz.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--461bbf84-cfd1-aacc-be9d-0000fb728d2f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.m68k","pattern":"[url:value = 'http://176.65.139.133/nz/nz.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a948a178-38d4-8e75-1a56-0000618f38e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.arm6","pattern":"[url:value = 'http://176.65.139.133/nz/nz.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--930715e3-e563-2198-c8bc-0000f6035873","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.64/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.64/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19a35456-8b5f-74cd-c920-00000d4f7db7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.64/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.64/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09ea9738-6c93-6470-aee3-0000a0d1e634","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.17.83.99:51270/i","pattern":"[url:value = 'http://60.17.83.99:51270/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb6e4dd8-0da8-ccc7-f41f-000098315cda","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.217.97.172/bin/support.client.exe","pattern":"[url:value = 'https://217.217.97.172/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99ed5670-5582-8d70-36f5-000092dd4970","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.217.97.172/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://217.217.97.172/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43a55d54-16d3-ea48-72ac-0000366ab7ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://45.83.28.121/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://45.83.28.121/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac8f910c-8265-9280-aac4-0000e831998c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://195.177.94.147/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://195.177.94.147/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d30629da-b5f1-195e-0cdd-0000d94dcf45","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.23/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.23/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--609c563b-ebec-9463-7f7d-0000c9106a02","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://104.249.10.74/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://104.249.10.74/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6de06326-b60f-67c5-385f-0000266ca58d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/8133118018/7hc0ffr.exe","pattern":"[url:value = 'http://62.60.226.140/files/8133118018/7hc0ffr.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d99c922b-c72a-bfca-0076-00007aa0db81","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://84.200.80.106/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://84.200.80.106/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca1780c4-73dd-6ce2-dd8d-0000da806674","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://84.200.80.106/bin/support.client.exe","pattern":"[url:value = 'https://84.200.80.106/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ee6d224-36cf-7382-5a15-000031554bdc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://79.133.57.37/bin/support.client.exe","pattern":"[url:value = 'https://79.133.57.37/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13a94d1c-713e-5329-5663-00000b9735ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://79.133.57.37/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://79.133.57.37/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38aa0258-74da-dc40-4613-000092ec12ea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/obsh/R6.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/obsh/R6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58c77807-d38b-e17b-e7a7-000013dff79e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/ojujn.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/ojujn.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fae9bf3-e5d8-a4b6-91b5-0000e02f5556","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/obsh/mixnew2.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/obsh/mixnew2.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05ca2be8-4cc4-9dfd-89e8-00005e461274","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/obsh/R7.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/obsh/R7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31243ead-c6b6-ba77-8838-000058107400","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/kliulij.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/kliulij.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da9c3940-85b2-fdbd-e5e9-000073d19a61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.54.65.215:34323/i","pattern":"[url:value = 'http://42.54.65.215:34323/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bb6c649-1b87-85c4-f7ee-0000349f95bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.29.33.253:58457/i","pattern":"[url:value = 'http://27.29.33.253:58457/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f07b9b21-aaf5-9af8-741b-0000989b92ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/KJHJHKJKJH.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/KJHJHKJKJH.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b020a23b-c00a-6b9e-fdc6-00007b17b1cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/hnmh.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/hnmh.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c0a0a13-31a6-77b9-f3b0-0000f02c598f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/kJHGFDs.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/kJHGFDs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24f92835-6803-a150-5b94-00004fea86e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/bjbh.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/bjbh.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd845a7f-90ac-dab9-bfc5-0000015a98e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/dflnglkfdmgs.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/dflnglkfdmgs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49fddcb8-3de3-64ea-8e1e-0000d1baeefd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/arFtU.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/arFtU.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6537684c-23d6-a629-d598-0000986f75cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/jhgkuyyg.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/jhgkuyyg.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a883181-91b0-03eb-2d7c-000031bf38b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://192.142.53.225/bin/support.client.exe","pattern":"[url:value = 'https://192.142.53.225/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--703d0d59-db2b-8cc6-62d6-00007add62bd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://192.142.53.225/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://192.142.53.225/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bea5f9d7-cc78-f723-a6f8-00001f726b36","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.12.214:51034/i","pattern":"[url:value = 'http://219.155.12.214:51034/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b38426f-31af-e2cc-754c-00005db05cb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://2.58.56.49/ConnectProAgentSetup.msi","pattern":"[url:value = 'http://2.58.56.49/ConnectProAgentSetup.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5eb7139-1ee9-9a97-f08d-0000de30e843","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.38.255:44908/bin.sh","pattern":"[url:value = 'http://125.43.38.255:44908/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a769c912-d38b-917b-552e-0000c58287ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.121.161:40429/bin.sh","pattern":"[url:value = 'http://42.224.121.161:40429/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b68bd94a-1055-254f-c013-0000a3eb69f0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://156.146.26.225:55397/i","pattern":"[url:value = 'http://156.146.26.225:55397/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cb8a37a-1f07-2bce-f604-0000ed807ce0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.121.161:40429/i","pattern":"[url:value = 'http://42.224.121.161:40429/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39cc9317-9cae-3ea1-3f5c-000025a1a720","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.22.9:38226/bin.sh","pattern":"[url:value = 'http://222.141.22.9:38226/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a51b53a-252a-0559-f861-000058541eed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.217.123.198:46902/i","pattern":"[url:value = 'http://60.217.123.198:46902/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f94b0902-41f9-006e-a152-0000c73eb268","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://scuttlepopdownload.monster","pattern":"[url:value = 'http://scuttlepopdownload.monster']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4397433f-c887-6b91-8104-00006e7efd61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://daleeby.com/R4JnneaiZebrwCkgG","pattern":"[url:value = 'https://daleeby.com/R4JnneaiZebrwCkgG']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14527404-b393-8eb2-848b-00003d49614c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.101/Servicer.apk","pattern":"[url:value = 'http://77.239.124.101/Servicer.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b125c32-837e-7038-c2b6-0000362e170b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://cqintzfep6rw6jc9.public.blob.vercel-storage.com/2.bat","pattern":"[url:value = 'https://cqintzfep6rw6jc9.public.blob.vercel-storage.com/2.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea4a3153-cd30-77d1-fbb5-0000cad87a91","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.mpsl","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--382b4f69-3659-7e51-d266-0000682d1fb3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.arm64","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8be0ed26-40ec-8c5b-d066-0000836c10ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.arm7","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7f1d27a-0b72-a7eb-9800-0000d4a4cdc8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://62.60.226.185/ven9392.exe","pattern":"[url:value = 'https://62.60.226.185/ven9392.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c24b3b87-90a0-f693-1282-0000cdb03f49","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://62.60.226.185/s0907.exe","pattern":"[url:value = 'https://62.60.226.185/s0907.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a62a564e-8c85-0c06-5a27-0000b928d6c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://62.60.226.185/t0907.exe","pattern":"[url:value = 'https://62.60.226.185/t0907.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65ee8c0a-4aa7-1901-abfb-00002965d825","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.arm5","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fce7ddb0-756b-138b-5031-00003bd077cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.arm6","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4e70b47-7dbf-5751-7d99-00005c39704f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.x86","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd2af5e-a885-3ed8-953b-0000d3165561","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.mips64el","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.mips64el']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13b4c34c-6a10-7d1d-d000-0000a12dc201","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.m68k","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--513fbc4b-d15e-f709-9b77-000076afeb57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.arm","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c5a9cba-96cd-900f-294f-00006af543e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.ppc64el","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.ppc64el']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99553a89-b3f1-a4fa-ae4b-0000243a1e3a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.ppc","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec07d8de-375d-5b21-a588-0000a4e487cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.sh4","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f98f79a-6cbd-655d-1169-0000a1db14db","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.mips","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43269882-4771-90a4-1072-00007d520fec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.s390x","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.s390x']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e186d99-72b4-14d1-e082-0000c58b4b23","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://aspenriver6.com/curl/epf215dtv0l/2otso19m8v27gj0d381.dat","pattern":"[url:value = 'https://aspenriver6.com/curl/epf215dtv0l/2otso19m8v27gj0d381.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a047b2ec-3bf8-d846-a50e-00006ac574c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://wer-ldr.duckdns.org/b.sh","pattern":"[url:value = 'http://wer-ldr.duckdns.org/b.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9846e0be-3abb-7e7a-479d-0000fa778165","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.x86_64","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b1384d0-d8be-ae50-493c-0000a2ae6c94","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.spc","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a454d4a-1411-356d-4835-0000ca1ac9b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.7.198:54475/bin.sh","pattern":"[url:value = 'http://115.49.7.198:54475/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--538d9b3c-7597-3bc9-c01f-0000d8bbf545","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://verifyidentify.com/check","pattern":"[url:value = 'https://verifyidentify.com/check']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66995323-ed40-19e2-cf9b-0000d6389806","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://akb.cat/N330","pattern":"[url:value = 'http://akb.cat/N330']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a3e11af-6d0a-5e8e-6b88-0000b4ea6142","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.42:56390/bin.sh","pattern":"[url:value = 'http://210.208.110.42:56390/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--877789d3-0850-00fa-b731-00005f9909dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.68.231:52921/i","pattern":"[url:value = 'http://123.11.68.231:52921/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a56d3aa-346f-bd55-cc00-00000884ff0f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.42:56390/i","pattern":"[url:value = 'http://210.208.110.42:56390/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec8a76a1-aa59-f241-6565-000058c4c65b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.115.109:39219/bin.sh","pattern":"[url:value = 'http://182.127.115.109:39219/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39889fc2-c475-3afb-df69-000073e79a7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://www.justturtle.com/indie.exe","pattern":"[url:value = 'http://www.justturtle.com/indie.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--864802da-d667-7a83-6b43-00003e595eee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.115.109:39219/i","pattern":"[url:value = 'http://182.127.115.109:39219/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d7a1fee-90e5-d387-0afd-00002a802ef5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.185.241.8:42488/bin.sh","pattern":"[url:value = 'http://119.185.241.8:42488/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d51ab281-ca60-66e5-723a-00003f10018c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://58.255.41.239:39378/i","pattern":"[url:value = 'http://58.255.41.239:39378/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72e18902-7ea0-ee85-c40b-0000cabe605e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://rukeyou.com/sys/X2/X2-payload_baolljp.jpg","pattern":"[url:value = 'https://rukeyou.com/sys/X2/X2-payload_baolljp.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--977f368b-93b6-2040-9f48-000050b04c80","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://rukeyou.com/sys/X2/X2-payload_dfyihao.zip","pattern":"[url:value = 'https://rukeyou.com/sys/X2/X2-payload_dfyihao.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a1e267d-f982-d0e8-775a-0000918e0080","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://nmhjnu.shop/Common_Offline_Utility_ITR-1_to_4_AY2026-07-27.vhdx","pattern":"[url:value = 'https://nmhjnu.shop/Common_Offline_Utility_ITR-1_to_4_AY2026-07-27.vhdx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b173f144-8b53-5279-dba0-0000474e9079","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.68.15:56896/bin.sh","pattern":"[url:value = 'http://125.40.68.15:56896/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10793c01-75be-a002-e209-0000af9e9fee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://mkjiun.shop/Common_Offline_Utility_ITR-1_to_4_AY2026-07-27.vhdx","pattern":"[url:value = 'https://mkjiun.shop/Common_Offline_Utility_ITR-1_to_4_AY2026-07-27.vhdx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab6b2b9d-4e1e-1960-08e9-0000adad2b1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://bmnjhy.shop/Common_Offline_Utility_ITR-1_to_4_AY2026-07-27.vhdx","pattern":"[url:value = 'https://bmnjhy.shop/Common_Offline_Utility_ITR-1_to_4_AY2026-07-27.vhdx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51f6cc55-3a44-fdcd-f07e-0000ad9066cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://23.94.148.3/70/weareinthebestplaceforbetterfuturecomingforme.hta","pattern":"[url:value = 'http://23.94.148.3/70/weareinthebestplaceforbetterfuturecomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73c4b243-e264-3b63-5a35-0000cc50bcd7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://23.94.148.3/70/img_222651.png","pattern":"[url:value = 'http://23.94.148.3/70/img_222651.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--665b5097-52d1-4ac5-1220-00004a283e95","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://pic.li/images/MSI_PRO_Last.jpeg","pattern":"[url:value = 'https://pic.li/images/MSI_PRO_Last.jpeg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f160ce46-49c1-5992-ccea-000098aa2fb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/upd","pattern":"[url:value = 'http://103.229.53.84:8443/upd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bcd8c9f-e335-c133-f66a-000070dad3b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/update.ps1","pattern":"[url:value = 'http://103.229.53.84:8443/update.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0428d26e-d468-1f0a-c7ac-00003084ace7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/dll","pattern":"[url:value = 'http://103.229.53.84:8443/dll']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c376189-2004-311a-77e2-0000dec99a04","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/r.ps1","pattern":"[url:value = 'http://103.229.53.84:8443/r.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3547e754-f7e8-e51a-b185-0000664472ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/run.ps1","pattern":"[url:value = 'http://103.229.53.84:8443/run.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a763c74a-fb12-e48f-2470-0000d97b3c74","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/enc","pattern":"[url:value = 'http://103.229.53.84:8443/enc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afda0505-d93c-6f1a-4128-0000e9cc4865","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/package.zip","pattern":"[url:value = 'http://103.229.53.84:8443/package.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d71592d6-4c6f-1579-1374-000053d80088","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/chromelevator_x64.exe","pattern":"[url:value = 'http://103.229.53.84:8443/chromelevator_x64.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c87ad1c4-8c7a-d14b-85f4-00004a231786","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/data","pattern":"[url:value = 'http://103.229.53.84:8443/data']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93dc3bb5-5e13-88e1-95da-000084340801","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/bin","pattern":"[url:value = 'http://103.229.53.84:8443/bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e427c3a-d543-56dc-ff36-0000c6d233a0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.68.15:56896/i","pattern":"[url:value = 'http://125.40.68.15:56896/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5b7b338-d2c6-9985-48fd-000044e32a77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.107.186/zs/config.bin","pattern":"[url:value = 'http://196.251.107.186/zs/config.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--152da76b-acc5-a198-2cb3-0000146d1721","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.107.186/uniform_4.44_INSTALL.exe","pattern":"[url:value = 'http://196.251.107.186/uniform_4.44_INSTALL.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc6614f2-b3ba-797a-2413-0000c849f1f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.107.186/clpr6.exe","pattern":"[url:value = 'http://196.251.107.186/clpr6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be063531-b34b-bbcd-ea3b-00009a8dad34","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-1c4ef2a315ec4b89b9dfad9472afee69.r2.dev/radman.png","pattern":"[url:value = 'https://pub-1c4ef2a315ec4b89b9dfad9472afee69.r2.dev/radman.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e519e23-521b-44e1-0566-00003dd37b9f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-eab9eb7761644f51bceeecfefdf0ec2b.r2.dev/teddywon.hta","pattern":"[url:value = 'https://pub-eab9eb7761644f51bceeecfefdf0ec2b.r2.dev/teddywon.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e122262f-b992-a07d-1567-0000d1d98652","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://one-graup.com/LUI.hta","pattern":"[url:value = 'https://one-graup.com/LUI.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1698b0a3-4922-b5d9-2af8-00003559134f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://pub-1c4ef2a315ec4b89b9dfad9472afee69.r2.dev/zuyoking.png","pattern":"[url:value = 'https://pub-1c4ef2a315ec4b89b9dfad9472afee69.r2.dev/zuyoking.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4227670f-4826-1337-7660-0000709c4ada","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.185.241.8:42488/i","pattern":"[url:value = 'http://119.185.241.8:42488/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--409532a8-6acf-f2cc-57ce-00004e087a8c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://58.255.41.239:39378/bin.sh","pattern":"[url:value = 'http://58.255.41.239:39378/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c7d41e5-6ce7-e665-7ca0-00009c8924ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.190.213:48304/bin.sh","pattern":"[url:value = 'http://42.231.190.213:48304/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fabedb4a-4b2d-7e58-1d61-0000c76ecf1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://163.182.97.242:3654/i","pattern":"[url:value = 'http://163.182.97.242:3654/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c804b24-b235-9fdf-b47e-00003507be00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.190.213:48304/i","pattern":"[url:value = 'http://42.231.190.213:48304/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c1f283f-0119-a75e-f84b-00000b144460","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.5.26.85:51916/i","pattern":"[url:value = 'http://42.5.26.85:51916/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f1c19c4-71d3-b9a5-8b0e-0000edd18e5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.210.94:55730/bin.sh","pattern":"[url:value = 'http://182.123.210.94:55730/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7d1ae60-90fb-01e7-c9d9-00007df1fd0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.229.46:46712/bin.sh","pattern":"[url:value = 'http://27.37.229.46:46712/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ce792ca-f2f7-b7f2-80ef-00001557c977","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.218.95:36712/i","pattern":"[url:value = 'http://42.231.218.95:36712/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e746faf4-674c-6092-861c-0000375773d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.229.46:46712/i","pattern":"[url:value = 'http://27.37.229.46:46712/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c185077d-c0c1-ed04-cc10-00007acc5f04","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.210.94:55730/i","pattern":"[url:value = 'http://182.123.210.94:55730/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7eb31b5-2c74-8301-55d7-0000c66645d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://154.90.70.52/xmrig.sh","pattern":"[url:value = 'http://154.90.70.52/xmrig.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--117caa21-71b9-76f2-dcf5-0000c0a2001c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://122.241.88.111:37163/bin.sh","pattern":"[url:value = 'http://122.241.88.111:37163/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dff80cf-1f9b-29e9-08d8-00007804e368","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.103.241:51367/i","pattern":"[url:value = 'http://222.138.103.241:51367/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aa4b4a2-13e3-611a-6d13-00007f98c067","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://122.241.88.111:37163/i","pattern":"[url:value = 'http://122.241.88.111:37163/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bb3b9f8-c25b-6250-0f9d-000028ce905a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://firstratezim.com/Updater.exe","pattern":"[url:value = 'https://firstratezim.com/Updater.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78ef9d0e-686c-263a-8ed9-00000ab26362","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.197.114:37580/bin.sh","pattern":"[url:value = 'http://222.140.197.114:37580/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94321eb4-25cc-9dea-2347-00002ab77da9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://threedrows.net/uploads/cl1786993325592.exe","pattern":"[url:value = 'https://threedrows.net/uploads/cl1786993325592.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c403346-1cd2-80be-75e6-000002d69050","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.81.6:39508/bin.sh","pattern":"[url:value = 'http://42.224.81.6:39508/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe2bfad8-5e2c-0e1a-f1e4-00003503d1af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.197.114:37580/i","pattern":"[url:value = 'http://222.140.197.114:37580/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c65df087-8fed-4cb3-e441-0000116a8499","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_mipsel","pattern":"[url:value = 'http://31.58.171.194/data_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92d60e3b-52a1-a1cf-51c2-00002d7b1522","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_mips","pattern":"[url:value = 'http://31.58.171.194/data_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--889cdbb2-c83c-9d0a-86a9-0000a9d9ace3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.238.169.48:54614/bin.sh","pattern":"[url:value = 'http://42.238.169.48:54614/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--056549fc-0a40-7408-2bfe-000054cbae84","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.249.199.3:45299/bin.sh","pattern":"[url:value = 'http://103.249.199.3:45299/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a92acc6-4a5c-546b-ac54-00007de7aeeb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.81.6:39508/i","pattern":"[url:value = 'http://42.224.81.6:39508/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--586f5e2c-fc01-6e19-ee2f-00003c14f661","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.238.169.48:54614/i","pattern":"[url:value = 'http://42.238.169.48:54614/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac95b69d-0d05-76ec-e2ec-000033470054","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.46.19:42170/bin.sh","pattern":"[url:value = 'http://123.12.46.19:42170/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7e7c76f-e1c8-75f0-4ce3-00000d28ff56","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.108.7.49:39084/bin.sh","pattern":"[url:value = 'http://101.108.7.49:39084/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f05425a-cb0d-e318-8fbc-0000277837bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.114.59.126:36050/bin.sh","pattern":"[url:value = 'http://119.114.59.126:36050/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--691c192b-e3bd-b4bc-c743-00004f6f1991","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.46.19:42170/i","pattern":"[url:value = 'http://123.12.46.19:42170/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--086743b1-78cd-a48f-a435-0000386839bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.45.47:55198/bin.sh","pattern":"[url:value = 'http://42.230.45.47:55198/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1034aab2-fca1-9cfc-41aa-000047f0cf16","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.108.7.49:39084/i","pattern":"[url:value = 'http://101.108.7.49:39084/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6b032b6-3791-d97c-2e94-000013b42037","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://121.233.205.151:33594/bin.sh","pattern":"[url:value = 'http://121.233.205.151:33594/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e3ae0b8-8e73-b1cb-9fa4-0000a749c066","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.45.47:55198/i","pattern":"[url:value = 'http://42.230.45.47:55198/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d2307ea-638b-ce32-e173-0000bd25f7e0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.163.35:38931/bin.sh","pattern":"[url:value = 'http://115.48.163.35:38931/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a1ddea7-e9b4-83d7-6984-000054fc8a59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://121.233.205.151:33594/i","pattern":"[url:value = 'http://121.233.205.151:33594/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8a075ab-0278-a593-29b6-0000a5c5d9dc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_arm5","pattern":"[url:value = 'http://31.58.171.194/data_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb3beae0-4218-ba4b-8701-0000480e67a7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_x86_64","pattern":"[url:value = 'http://31.58.171.194/data_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d1839b2-a7f1-5cd6-ae9c-00002f447a11","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_x86","pattern":"[url:value = 'http://31.58.171.194/data_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7feebd9f-3070-e4d0-d0ca-000014e0a596","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/bbc","pattern":"[url:value = 'http://31.58.171.194/bbc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46ae1487-e420-baea-e1c3-00000fcc1157","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_arm7","pattern":"[url:value = 'http://31.58.171.194/data_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfa7453d-1890-84c5-4431-00001d79beb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_arm4","pattern":"[url:value = 'http://31.58.171.194/data_arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31a92411-e079-2b72-3bf2-0000b7707632","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_arm6","pattern":"[url:value = 'http://31.58.171.194/data_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dbfb6f4-d35b-228d-d181-0000affa391c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_powerpc","pattern":"[url:value = 'http://31.58.171.194/data_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c90a9a20-0795-4765-90e7-0000a7408809","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_aarch64","pattern":"[url:value = 'http://31.58.171.194/data_aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bbd2612-98b4-3946-f8f8-00009dda7e3e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.172.77.129:45661/bin.sh","pattern":"[url:value = 'http://123.172.77.129:45661/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12bc1103-fc2f-529c-599d-0000673e2752","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.163.35:38931/i","pattern":"[url:value = 'http://115.48.163.35:38931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee34d402-6e56-b628-5b9a-000033126580","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.249.227:40515/bin.sh","pattern":"[url:value = 'http://219.157.249.227:40515/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ef636be-6a55-5001-2e46-0000e67450e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.31.103.204:55940/bin.sh","pattern":"[url:value = 'http://103.31.103.204:55940/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21036bef-eb31-7a3b-e874-000049c831c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.151.118:35018/bin.sh","pattern":"[url:value = 'http://42.224.151.118:35018/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d589c57c-b90d-3d2a-53bc-00008b74ccc0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.121.48:46211/bin.sh","pattern":"[url:value = 'http://115.57.121.48:46211/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbd0bc67-f700-fc66-c9c6-0000774dabb0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.249.199.3:45299/i","pattern":"[url:value = 'http://103.249.199.3:45299/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36dc9145-4367-92f8-406a-000065182f17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.31.103.204:55940/i","pattern":"[url:value = 'http://103.31.103.204:55940/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--049768bc-1cee-f782-441a-0000fb7da596","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.151.118:35018/i","pattern":"[url:value = 'http://42.224.151.118:35018/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06951339-8c76-2555-00ac-00003e46bdee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.121.48:46211/i","pattern":"[url:value = 'http://115.57.121.48:46211/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--701f26dc-864b-cfc7-e968-00003e33075b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://83.219.1.198:33484/i","pattern":"[url:value = 'http://83.219.1.198:33484/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1cfe93d-f9d4-14be-6e2e-00005ca2a428","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.11.55:53485/bin.sh","pattern":"[url:value = 'http://182.116.11.55:53485/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19008a68-f2a4-70f0-b40d-000073deafee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.186.126.198:55528/i","pattern":"[url:value = 'http://60.186.126.198:55528/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58d7d846-8fb5-2d5c-9563-0000d137bce4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.114.243:889/gg11","pattern":"[url:value = 'http://191.44.114.243:889/gg11']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cddd5f9-279b-3fdd-cbc9-00004a4e925e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.132.237:60298/bin.sh","pattern":"[url:value = 'http://222.141.132.237:60298/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fff88a9-0c48-933f-ebca-0000fc87de00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.11.55:53485/i","pattern":"[url:value = 'http://182.116.11.55:53485/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04126e7a-c364-dc5d-1fe4-0000a5d79f4d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.44.145.210:44835/i","pattern":"[url:value = 'http://27.44.145.210:44835/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56fdc2c0-c371-052a-1ed6-00005f19e8d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.10.6:39981/i","pattern":"[url:value = 'http://115.48.10.6:39981/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81e13fd2-a848-b847-e506-0000f5a85ca3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.114.243:889/.bash_history","pattern":"[url:value = 'http://191.44.114.243:889/.bash_history']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a33ffbc1-6810-4bf4-db1e-00002535ac31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.250.165:60904/bin.sh","pattern":"[url:value = 'http://182.121.250.165:60904/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a3fd55a-e0d0-e800-37da-0000df74f295","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.190.189.204:53404/bin.sh","pattern":"[url:value = 'http://180.190.189.204:53404/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb7ced69-00c9-3fb3-b21d-00000113054c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://connectmagazineads.com/CarbonCopyCloner7.dmg","pattern":"[url:value = 'https://connectmagazineads.com/CarbonCopyCloner7.dmg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f8c5b39-9e15-1b41-f203-0000628dd0aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.154.188.255/36/ecc/iwantsomethingbetterformegetbackgoodthings.vbe","pattern":"[url:value = 'https://217.154.188.255/36/ecc/iwantsomethingbetterformegetbackgoodthings.vbe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3432781-d19b-0916-acf4-000021919695","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://57.129.23.24/8089/crypted.ps1","pattern":"[url:value = 'https://57.129.23.24/8089/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87576957-f3fc-58a9-1ebb-0000dcb569a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://57.129.23.24/sike/crypted.ps1","pattern":"[url:value = 'https://57.129.23.24/sike/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83716315-b0c0-97e3-68eb-000087495d78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.154.188.255/35/eas/niceworking.vbe","pattern":"[url:value = 'https://217.154.188.255/35/eas/niceworking.vbe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3361ce49-3a44-83f3-64df-0000e4f158dc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.154.188.255/60/goodthingsarebestformehappeninggood.vbe","pattern":"[url:value = 'https://217.154.188.255/60/goodthingsarebestformehappeninggood.vbe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--001f91d0-9fba-a476-d1de-00009cadc630","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://217.154.188.255/35/goodthingsarecomingfromthebestplacescomingforme.hta","pattern":"[url:value = 'https://217.154.188.255/35/goodthingsarecomingfromthebestplacescomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f0fa07b-b962-5179-aa31-0000926a63f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.60.195.219/ty/p/cgnty_carrier.ahk","pattern":"[url:value = 'https://217.60.195.219/ty/p/cgnty_carrier.ahk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0f1e226-32fc-a99c-8a88-00006e442cb8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.2.53.55:45559/bin.sh","pattern":"[url:value = 'http://116.2.53.55:45559/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a610df9-ded3-096e-ce1a-0000c1782228","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://62.60.226.185/r843.exe","pattern":"[url:value = 'https://62.60.226.185/r843.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f596f1d4-3a9e-7dfa-86ac-00006a3d3e3a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://204.44.69.216/93/ecce/givenmethebestthignswithbetterplacescomingfromthebest.hta","pattern":"[url:value = 'https://204.44.69.216/93/ecce/givenmethebestthignswithbetterplacescomingfromthebest.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dd9daea-ac1c-cddf-0ca5-0000d4db5730","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://62.60.226.185/kaze.exe","pattern":"[url:value = 'https://62.60.226.185/kaze.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6643fac-e5ff-7373-8dd9-000036156e61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://217.154.188.255/60/document_picture_0994950005995.jpg/verygoodthingsarecomingentiretimeforbest.hta","pattern":"[url:value = 'https://217.154.188.255/60/document_picture_0994950005995.jpg/verygoodthingsarecomingentiretimeforbest.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--188bfa63-8acb-6698-16d1-00002ade6350","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://azq0yqtjd.s3.ap-southeast-1.amazonaws.com/DeCeRKDepesL.apk","pattern":"[url:value = 'https://azq0yqtjd.s3.ap-southeast-1.amazonaws.com/DeCeRKDepesL.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ab3b005-6e3b-94c1-d927-00004410cbc1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://107.175.88.87/22/goodpersonforbestthingsfor.hta","pattern":"[url:value = 'https://107.175.88.87/22/goodpersonforbestthingsfor.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--598f8632-dbd8-9ce3-2b7a-0000c347d575","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://172.245.95.62/ph/velogs.exe","pattern":"[url:value = 'https://172.245.95.62/ph/velogs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b86039b7-3ccc-965d-4619-000077514161","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://198.23.144.125/wed/crypted.ps1","pattern":"[url:value = 'https://198.23.144.125/wed/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bce5daa2-b78d-7c42-1b69-0000853df77e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://204.44.69.216/93/goodthingswithbestnetworkingskillcomingfromtheheartforme.js","pattern":"[url:value = 'https://204.44.69.216/93/goodthingswithbestnetworkingskillcomingfromtheheartforme.js']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--223f0d52-be75-d1ec-bebc-00009886ec22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://57.129.23.24/63748/crypted.ps1","pattern":"[url:value = 'https://57.129.23.24/63748/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86deecee-4807-a9a4-8677-0000c4aafbb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://57.129.23.24/29039/crypted.ps1","pattern":"[url:value = 'https://57.129.23.24/29039/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8c960dd-58a5-76a0-ee8e-0000f662f2b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://57.129.23.24/09890/crypted.ps1","pattern":"[url:value = 'https://57.129.23.24/09890/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2870e0eb-03cc-9ca7-4d0d-00005fbaf817","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://172.245.209.194/44/goodcommuncaitionskilldevleipedfromthegood.js","pattern":"[url:value = 'https://172.245.209.194/44/goodcommuncaitionskilldevleipedfromthegood.js']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df6303bf-9237-bded-d774-0000c5e29f7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.239.2:34176/bin.sh","pattern":"[url:value = 'http://112.198.239.2:34176/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce3728c6-b880-7119-094b-000084b4a437","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.60.195.219/ty/v/client_carrier.ahk","pattern":"[url:value = 'https://217.60.195.219/ty/v/client_carrier.ahk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9278be35-967c-8a1b-b1c0-0000f24e187f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://217.60.195.219/ty/load.bat","pattern":"[url:value = 'https://217.60.195.219/ty/load.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--240c523a-c618-8b78-2c05-00005cb15631","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://217.60.195.219/ty/s.bat","pattern":"[url:value = 'http://217.60.195.219/ty/s.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--156c377e-0881-b7f7-dbcd-00007e1a8da6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://baoxissde.one/S/spxploy.vbs","pattern":"[url:value = 'https://baoxissde.one/S/spxploy.vbs']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--caff75d9-7bb4-d2b0-33b7-0000096429e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://meeting.supply-reflection.shop/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://meeting.supply-reflection.shop/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff0e8e21-fba7-355a-805e-00008f41f144","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://tantralegacy.com/Client/battlebot.exe","pattern":"[url:value = 'https://tantralegacy.com/Client/battlebot.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea065319-e8d3-e3c0-51f0-00009f747619","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://dl.myresult.co.za:8071/10y8r8/go_b3.bat","pattern":"[url:value = 'http://dl.myresult.co.za:8071/10y8r8/go_b3.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99238564-05b5-c677-0bca-00005f3b3bb7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://itsmystik.com/dl/deadlock/Loader.exe","pattern":"[url:value = 'https://itsmystik.com/dl/deadlock/Loader.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2604653a-8755-8806-af46-0000c26d7e35","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://importantdocumentscopys.s3.us-east-2.amazonaws.com/ScreenConnect.ClientSetup.msi","pattern":"[url:value = 'https://importantdocumentscopys.s3.us-east-2.amazonaws.com/ScreenConnect.ClientSetup.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9278e7c4-65be-f687-ab4b-00002d31e785","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://94.26.90.90/client.exe","pattern":"[url:value = 'https://94.26.90.90/client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f8d30ef-959f-54d6-7fdd-00001a871b62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-a6ae2d4aa393400aa29f7b02ac7ab213.r2.dev/OCUDLOMO.msi","pattern":"[url:value = 'https://pub-a6ae2d4aa393400aa29f7b02ac7ab213.r2.dev/OCUDLOMO.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24937ac2-d718-d925-66f1-0000da8b5426","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://baoxissde.one/S/sp.zip","pattern":"[url:value = 'https://baoxissde.one/S/sp.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7fc2456-082e-313a-9bac-0000d9a448ea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://xxpro.dev/BAC_PC%E5%A3%B3.exe","pattern":"[url:value = 'https://xxpro.dev/BAC_PC%E5%A3%B3.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42ab77df-f489-cce7-e269-000053d9a2b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-f225fc4c925f4cad963c543c3378b1ae.r2.dev/Bembemi.exe","pattern":"[url:value = 'https://pub-f225fc4c925f4cad963c543c3378b1ae.r2.dev/Bembemi.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--755a6932-ef8e-97d4-5092-0000ec181c21","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://bm2contabilidade.com.br/Nxtlvllnk/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://bm2contabilidade.com.br/Nxtlvllnk/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d226d631-2204-e724-ff8f-0000d4b02dbf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_5531355e31758cd9.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_5531355e31758cd9.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec9895d4-1533-b3f4-64c7-00008c14bd87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_fedb1cae70e15500.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_fedb1cae70e15500.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac501e0a-7d95-e9c6-95f0-000046cbaeff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.97.56.196/Services.apk","pattern":"[url:value = 'http://38.97.56.196/Services.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5db7accd-7028-0fc3-92d1-00003ab6952a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/Services.apk","pattern":"[url:value = 'http://176.65.139.139/Services.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de2bcc8a-920e-deb0-2c61-0000d327ba24","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4799cc1c552dbe75.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4799cc1c552dbe75.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c540b52d-0a77-a680-a32d-00002b8d8bb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.221.93.40/Servicer.apk","pattern":"[url:value = 'http://37.221.93.40/Servicer.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eab17141-25bd-5bf9-d8e6-00000f6c691e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_0d90bf33aa3e6c18.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_0d90bf33aa3e6c18.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--384a93d6-92e3-0e77-b0e9-0000b1177d43","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.196:8080/api/v1/install","pattern":"[url:value = 'http://94.154.43.196:8080/api/v1/install']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18d3aa77-4cde-af83-3c27-0000eefaec6e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.arm4","pattern":"[url:value = 'http://69.33.213.199/nerv.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55a2e171-2608-e58e-4a45-0000def847f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.mips","pattern":"[url:value = 'http://69.33.213.199/nerv.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d11875f2-d32a-c20c-6e68-00000312f724","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.x86_64","pattern":"[url:value = 'http://69.33.213.199/nerv.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fd49ae1-c728-cedb-765d-000056468b0b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.arm5","pattern":"[url:value = 'http://69.33.213.199/nerv.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e5fc7c9-5aef-a255-47d8-00001567e503","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.x86","pattern":"[url:value = 'http://69.33.213.199/nerv.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c75b4961-c5c2-1166-d73c-00006061984e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.dbg","pattern":"[url:value = 'http://69.33.213.199/nerv.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81dafbcd-4e35-9632-9865-0000fc4f4380","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.arm7","pattern":"[url:value = 'http://69.33.213.199/nerv.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df16362e-fa40-f323-4210-0000bb6d0abf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://ip-69-33-213-199.dfw.megapath.net/nerv.mips","pattern":"[url:value = 'http://ip-69-33-213-199.dfw.megapath.net/nerv.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6bf1450-6191-2c16-e89d-0000edba1280","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.sh4","pattern":"[url:value = 'http://69.33.213.199/nerv.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e07027b8-a8c0-72dd-7715-0000b5fb29bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.mpsl","pattern":"[url:value = 'http://69.33.213.199/nerv.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--450c2482-ae1d-1167-0f38-0000ee992788","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.x86_32","pattern":"[url:value = 'http://69.33.213.199/nerv.x86_32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6ddcb5b-b3c4-b617-2940-000044f324e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.arm6","pattern":"[url:value = 'http://69.33.213.199/nerv.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3edf607-1cee-1553-08bd-00006d648b76","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.ppc","pattern":"[url:value = 'http://69.33.213.199/nerv.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7d0f5d4-51a8-5533-b85c-000091ee1fb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.sparc","pattern":"[url:value = 'http://69.33.213.199/nerv.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--198ed5a7-d9f6-ce90-83f6-0000de0e912f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.m68k","pattern":"[url:value = 'http://69.33.213.199/nerv.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e4cff81-6309-4b5c-d880-0000f8cfc4ce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.98.218:49065/bin.sh","pattern":"[url:value = 'http://219.156.98.218:49065/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f63af33-458b-3532-7252-00002f7f8eec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.90.106:37277/i","pattern":"[url:value = 'http://182.126.90.106:37277/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efb517ae-6386-5a55-22b2-00009918f6be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://dl.myresult.co.za:8071/10y8r8/launch.vbs","pattern":"[url:value = 'http://dl.myresult.co.za:8071/10y8r8/launch.vbs']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b2f61db-db92-663b-959e-0000a29df8db","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://dl.myresult.co.za:8071/10y8r8/inject.ps1","pattern":"[url:value = 'http://dl.myresult.co.za:8071/10y8r8/inject.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a8d0fe6-2f60-60ea-ed0d-00004d880a74","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://dl.myresult.co.za:8071/10y8r8/as.xor","pattern":"[url:value = 'http://dl.myresult.co.za:8071/10y8r8/as.xor']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87d2acf0-2057-525f-cb00-00002bdd76e4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://dl.myresult.co.za:8071/10y8r8/wupd.bat","pattern":"[url:value = 'http://dl.myresult.co.za:8071/10y8r8/wupd.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa6d9864-3ec1-fb65-e49f-000031333b5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://dl.myresult.co.za:8071/10y8r8/ac.xor","pattern":"[url:value = 'http://dl.myresult.co.za:8071/10y8r8/ac.xor']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0467d5fd-2eae-0491-abc4-000066f36088","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.98.218:49065/i","pattern":"[url:value = 'http://219.156.98.218:49065/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d2bdbb8-7702-8dbf-8d2b-0000f14b0fff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.250.165:60904/i","pattern":"[url:value = 'http://182.121.250.165:60904/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6abeccef-ac25-8392-d26e-00001d5ed490","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.12.174:50575/bin.sh","pattern":"[url:value = 'http://115.48.12.174:50575/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ee7dca5-d17e-e59f-c6a4-0000382627f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.190.189.204:53404/i","pattern":"[url:value = 'http://180.190.189.204:53404/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54d22c68-85c3-b200-9a08-0000e35e0734","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.52.217:41359/bin.sh","pattern":"[url:value = 'http://27.215.52.217:41359/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a134766e-888c-58c4-ef0a-0000eeee89e0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.12.174:50575/i","pattern":"[url:value = 'http://115.48.12.174:50575/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd5879db-acab-bef0-09a8-0000eee784cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/daredevil.mips","pattern":"[url:value = 'http://94.154.43.210/daredevil.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--039e9dac-ab11-e2b5-0ff3-0000f74cabbd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/daredevil.armv6l","pattern":"[url:value = 'http://94.154.43.210/daredevil.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28b3ce6f-293c-58f2-93dc-0000b0ecd16d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/daredevil.armv5l","pattern":"[url:value = 'http://94.154.43.210/daredevil.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a85aced-da20-6ae9-7966-0000ca2c820d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/daredevil.armv7l","pattern":"[url:value = 'http://94.154.43.210/daredevil.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b24a21d-f1c5-3a31-794b-000040ba4f4c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/daredevil.x86_64","pattern":"[url:value = 'http://94.154.43.210/daredevil.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31a8ff2e-449d-1a54-e708-00008d8cf8dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/daredevil.armv4l","pattern":"[url:value = 'http://94.154.43.210/daredevil.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdc5d1dd-eca3-bec7-ce88-0000020a2111","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/344f7e","pattern":"[url:value = 'http://5.182.210.174/344f7e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d82af97-620f-f5dd-facd-00002603a9ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c515ee","pattern":"[url:value = 'http://5.182.210.174/c515ee']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2469196a-a7ea-68d6-e5bb-00001e587b98","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/573976","pattern":"[url:value = 'http://5.182.210.174/573976']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c88fff19-79ff-aaff-3bb3-000009a2be5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c4844d","pattern":"[url:value = 'http://5.182.210.174/c4844d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c23a6240-3085-f1d1-15e4-0000152b183b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/094392","pattern":"[url:value = 'http://5.182.210.174/094392']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96aeb304-e99f-a850-f149-00000df99e70","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b3679a","pattern":"[url:value = 'http://5.182.210.174/b3679a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80fbabb7-139c-d587-2b4b-000053fbe30d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9dfbc4","pattern":"[url:value = 'http://5.182.210.174/9dfbc4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--331c6088-1f27-1560-e51d-00006aac384d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/49fa35","pattern":"[url:value = 'http://5.182.210.174/49fa35']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd42245b-d4e7-e578-407b-0000fda54558","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/065109","pattern":"[url:value = 'http://5.182.210.174/065109']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d4b0278-1c21-f9af-aa6d-00007dac86f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/473c1a","pattern":"[url:value = 'http://5.182.210.174/473c1a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7db423d4-0d7a-795d-7710-00000c53d8cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/acb326","pattern":"[url:value = 'http://5.182.210.174/acb326']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6c0b3d6-7fe9-9714-9518-000029fe3301","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/69d5f2","pattern":"[url:value = 'http://5.182.210.174/69d5f2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50df3ad8-9d5b-4848-d6eb-00004429304a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/279fe0","pattern":"[url:value = 'http://5.182.210.174/279fe0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bae6dde-7f0f-8ee6-203d-0000925cc61a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/456417","pattern":"[url:value = 'http://5.182.210.174/456417']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--154e5548-fe1a-d92b-d220-0000dc575c45","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/2b08fb","pattern":"[url:value = 'http://5.182.210.174/2b08fb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e77f2049-8a2a-2f40-f8f0-0000de03bb09","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/0db2ec","pattern":"[url:value = 'http://5.182.210.174/0db2ec']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b07e229-7691-2aa3-7d8a-000031c63c77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/db7a9c","pattern":"[url:value = 'http://5.182.210.174/db7a9c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--804f7f65-f39e-5c1c-11e5-0000f4ae75dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8ac363","pattern":"[url:value = 'http://5.182.210.174/8ac363']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8192a18a-59cc-cb8f-a8d2-0000b1c9a4b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/515c80","pattern":"[url:value = 'http://5.182.210.174/515c80']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c73821a-e986-b623-4daf-0000257eb90b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/0b1663","pattern":"[url:value = 'http://5.182.210.174/0b1663']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb60c8e5-9aad-a288-0ff7-000015ce6b30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c72382","pattern":"[url:value = 'http://5.182.210.174/c72382']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6de7f014-4d5e-77e5-c5f7-0000c58bd809","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/676064","pattern":"[url:value = 'http://5.182.210.174/676064']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c00d38c-5f04-185f-450f-0000b64c31ca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/78f157","pattern":"[url:value = 'http://5.182.210.174/78f157']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02b4ba52-d46f-9bf9-d5b1-000049688ed5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/faedd6","pattern":"[url:value = 'http://5.182.210.174/faedd6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5642b87a-5ddc-1576-2ff9-000019deac72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/daredevil.mipsel","pattern":"[url:value = 'http://94.154.43.210/daredevil.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d7aaea5-98ba-46b3-38e8-0000ab91d33d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/55bd33","pattern":"[url:value = 'http://5.182.210.174/55bd33']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d6ce237-68ef-9e2f-8490-0000fd1e0a2b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/804c43","pattern":"[url:value = 'http://5.182.210.174/804c43']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5686c6f7-26e0-b9e6-dded-0000dd867670","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1498b2","pattern":"[url:value = 'http://5.182.210.174/1498b2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec58b2b1-8732-b14d-e324-000083a9c499","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/4d493d","pattern":"[url:value = 'http://5.182.210.174/4d493d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46e3f803-84ae-ccb4-dd79-0000135623c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/589a29","pattern":"[url:value = 'http://5.182.210.174/589a29']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6219c764-4dfc-3464-3960-00005b78cf79","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b74d4d","pattern":"[url:value = 'http://5.182.210.174/b74d4d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e887f83a-1f12-78a3-f248-000072335836","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/de19ef","pattern":"[url:value = 'http://5.182.210.174/de19ef']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c65ac785-1edc-e795-70d2-00001c8d6560","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6a20da","pattern":"[url:value = 'http://5.182.210.174/6a20da']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--125ebaf7-d26f-c687-3208-0000d6041a28","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e00ee7","pattern":"[url:value = 'http://5.182.210.174/e00ee7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24cc4337-51b5-7b7d-91f2-00009cd424c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b39f8f","pattern":"[url:value = 'http://5.182.210.174/b39f8f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c498c84e-2030-f732-d209-00007385a390","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/85692b","pattern":"[url:value = 'http://5.182.210.174/85692b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b52bb3d-9113-05d2-e783-00005a91744d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/76e6f5","pattern":"[url:value = 'http://5.182.210.174/76e6f5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dda7fb7f-a34b-5fdb-9e6a-000014216423","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.52.217:41359/i","pattern":"[url:value = 'http://27.215.52.217:41359/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0461516-3a57-46d1-44cf-000044d7982d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.182.131:41041/Mozi.m","pattern":"[url:value = 'http://115.57.182.131:41041/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e02b2a05-c376-34e7-087d-0000316ab2cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.63.8.194:46154/Mozi.m","pattern":"[url:value = 'http://183.63.8.194:46154/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6430928a-f6e9-45f3-0eb3-00007d7a03a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.186.229.108:47843/Mozi.m","pattern":"[url:value = 'http://110.186.229.108:47843/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f92c51b-ec3e-bff6-023f-00004c89d8d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/atomic/atomic.sh","pattern":"[url:value = 'http://77.239.124.108/atomic/atomic.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1fc993e-52ac-7b66-42ae-0000ce0b0291","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.23.132.41:35951/bin.sh","pattern":"[url:value = 'http://183.23.132.41:35951/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6616849-9584-8cc6-c388-00001cac4336","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.220.201:34645/i","pattern":"[url:value = 'http://61.53.220.201:34645/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b5f6a82-357d-e043-baa4-000072014553","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://python3.en-us--balancing.co/jquery.min.js","pattern":"[url:value = 'https://python3.en-us--balancing.co/jquery.min.js']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c0033c6-c0de-14fc-4312-0000953fca10","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://multisavcx.xyz/ncx","pattern":"[url:value = 'https://multisavcx.xyz/ncx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fdbd96f-f280-6d47-7540-0000f606bc26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://elxxvvx.xyz/i","pattern":"[url:value = 'https://elxxvvx.xyz/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b24a4109-7109-5227-d2c2-000084cca859","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/apiti.png","pattern":"[url:value = 'https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/apiti.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32a237d7-f879-5bd3-d15f-0000d46f04d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e63a825f-262a-0823-e7ca-00005c2f0fbe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.117.76.11:59095/bin.sh","pattern":"[url:value = 'http://119.117.76.11:59095/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a7c925a-c472-0b2e-d7c7-00008f993b6d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.23.132.41:35951/i","pattern":"[url:value = 'http://183.23.132.41:35951/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12970091-d168-cbfe-ffa8-000066cc919c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.229.190.135:33907/i","pattern":"[url:value = 'http://113.229.190.135:33907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c55215b-47c3-8bf7-7488-00000301343b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.212.210:44835/i","pattern":"[url:value = 'http://120.84.212.210:44835/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0892007e-374c-1c9a-76dc-0000b418f294","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.117.76.11:59095/i","pattern":"[url:value = 'http://119.117.76.11:59095/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae3fec70-e6ac-eb1b-a168-0000e42abc8d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://120.77.1.20:6021/linux","pattern":"[url:value = 'http://120.77.1.20:6021/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--829e0ca6-474d-11c0-dfdf-0000928195b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://85.203.4.64/client.exe","pattern":"[url:value = 'http://85.203.4.64/client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e03baadc-ede5-7179-8b49-00009506345d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://23.94.145.229/api/v1/ps1/bf57fba60c91af3c5b2a12a00824e554/payload?gk=8548a53bccb76780011e980c89530d41dc9762640a4cc2664b532a045e8dee8b","pattern":"[url:value = 'http://23.94.145.229/api/v1/ps1/bf57fba60c91af3c5b2a12a00824e554/payload?gk=8548a53bccb76780011e980c89530d41dc9762640a4cc2664b532a045e8dee8b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd81d191-b311-fe44-37cf-00000a3bd03c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.236.213:53264/bin.sh","pattern":"[url:value = 'http://115.55.236.213:53264/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf2059e8-5c05-2947-457b-0000039002ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.95.17:59123/i","pattern":"[url:value = 'http://61.53.95.17:59123/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ac9f115-ba72-7fda-ad27-000001848e87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.184.140.145:34890/bin.sh","pattern":"[url:value = 'http://60.184.140.145:34890/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfc06874-5999-1a24-8546-000091cea6e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.253.208:46690/bin.sh","pattern":"[url:value = 'http://59.97.253.208:46690/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--139b82da-5874-8212-0baf-00001a00455e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://res.cloudinary.com/shsw2tu4/image/upload/v1787199350/img_001530.jpg","pattern":"[url:value = 'https://res.cloudinary.com/shsw2tu4/image/upload/v1787199350/img_001530.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c9b3ce1-3ce1-6664-fcb7-00004878cc46","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.232.226.68:57370/bin.sh","pattern":"[url:value = 'http://112.232.226.68:57370/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9e25fc2-a732-3f3b-6639-0000157ac5a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://193.104.58.65/RUMPYU14TH.png","pattern":"[url:value = 'http://193.104.58.65/RUMPYU14TH.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c733ad0f-3507-9fe6-817e-00005b53a1e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://193.104.58.65/rumpyu13th.png","pattern":"[url:value = 'http://193.104.58.65/rumpyu13th.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e7ab72d-cc16-e5bb-a642-0000dfb730ce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://193.104.58.65/img_gas.png","pattern":"[url:value = 'http://193.104.58.65/img_gas.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc689350-8f8c-4cd4-4c35-000081cf5b71","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://193.104.58.65/rumpyu18.png","pattern":"[url:value = 'http://193.104.58.65/rumpyu18.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ddaf2a8-d117-0e5c-65fc-00006391f18e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://23.95.103.215/crypt/crypted.ps1","pattern":"[url:value = 'http://23.95.103.215/crypt/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b19c1b87-ea09-269a-97d0-000040835cef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://res.cloudinary.com/shsw2tu4/image/upload/v1787096999/img_194944.jpg","pattern":"[url:value = 'https://res.cloudinary.com/shsw2tu4/image/upload/v1787096999/img_194944.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bda0899-9410-8cb3-369d-0000a86b7758","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://res.cloudinary.com/c8tdweya/image/upload/v1787186570/img_204142.jpg","pattern":"[url:value = 'https://res.cloudinary.com/c8tdweya/image/upload/v1787186570/img_204142.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--538c1da3-2df4-cce0-e531-0000342a05d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://58.47.104.43:52617/bin.sh","pattern":"[url:value = 'http://58.47.104.43:52617/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a07c4ee-394c-57c4-b537-000066f83f87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.61.0:41221/bin.sh","pattern":"[url:value = 'http://219.155.61.0:41221/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87b9833c-c9bc-6efd-c7fb-00007b14997d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://sivrex.click/obi/Obi-64Bit-remcos_a.bin","pattern":"[url:value = 'https://sivrex.click/obi/Obi-64Bit-remcos_a.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bbe862b-2e7e-961f-10c7-0000816e4da2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://res.cloudinary.com/shsw2tu4/image/upload/v1787185571/img_202554.jpg","pattern":"[url:value = 'https://res.cloudinary.com/shsw2tu4/image/upload/v1787185571/img_202554.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2af571d-b20c-d623-cf16-0000531b00b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://res.cloudinary.com/shsw2tu4/image/upload/v1787199607/img_001951.jpg","pattern":"[url:value = 'https://res.cloudinary.com/shsw2tu4/image/upload/v1787199607/img_001951.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2813545b-2cf3-fe8c-a9c8-0000cef65d59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-378362a70f714a30b26c109732cabca4.r2.dev/img_171507.png","pattern":"[url:value = 'https://pub-378362a70f714a30b26c109732cabca4.r2.dev/img_171507.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7b3a7a8-9344-4ef6-3a8a-0000903381c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://sixmexicos.com/20/stego_cm94aawwlf.png","pattern":"[url:value = 'https://sixmexicos.com/20/stego_cm94aawwlf.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9aa4e3a6-008c-a088-23c0-00008d6ba338","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://nieuw.technoberg.nl//wp-content/bin44.exe","pattern":"[url:value = 'https://nieuw.technoberg.nl//wp-content/bin44.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--665b4889-215e-7011-97bd-0000de8b28b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://sunix-technology.com/images/niceorgimg_082205.png","pattern":"[url:value = 'https://sunix-technology.com/images/niceorgimg_082205.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--076dc90f-2b26-f0c1-220f-0000d6117376","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.240.151:46316/bin.sh","pattern":"[url:value = 'http://123.9.240.151:46316/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab47c02a-2b26-02af-139a-0000e2ee854e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://58.47.104.43:52617/i","pattern":"[url:value = 'http://58.47.104.43:52617/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--accd4ba2-ad12-19ad-5efd-0000d8d2e4cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://paularavanelli.com.br/7rfuc/f98f/Finanzam-agreement.html","pattern":"[url:value = 'https://paularavanelli.com.br/7rfuc/f98f/Finanzam-agreement.html']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b544a7a7-2fd0-7e0e-c4a8-0000b8b6a159","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://bucketforada.s3.ap-south-1.amazonaws.com/e3d7348c34787506/AdobeAcrobat.iso","pattern":"[url:value = 'https://bucketforada.s3.ap-south-1.amazonaws.com/e3d7348c34787506/AdobeAcrobat.iso']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--105a0019-5ead-a9e3-15fe-00006c3f65ab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.153.246:33661/i","pattern":"[url:value = 'http://182.121.153.246:33661/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--470040ac-6e41-b59c-5941-0000d46daee8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.240.151:46316/i","pattern":"[url:value = 'http://123.9.240.151:46316/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cce44296-08b9-3609-2ccb-000068c08ac6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.6.45:53526/i","pattern":"[url:value = 'http://182.119.6.45:53526/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e0a1843-4986-001d-b2ce-0000e464073e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.228.233.155:37974/bin.sh","pattern":"[url:value = 'http://42.228.233.155:37974/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c61b686-aa27-a164-0eb1-000099e47ae0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.228.233.155:37974/i","pattern":"[url:value = 'http://42.228.233.155:37974/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be660a3f-1831-fb77-bf6e-0000857fcb5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://files.catbox.moe/knujwn.png","pattern":"[url:value = 'https://files.catbox.moe/knujwn.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b01f6457-ef13-997d-7d3e-0000111cde7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.159.178:51500/bin.sh","pattern":"[url:value = 'http://61.52.159.178:51500/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27eebf33-57de-5f2b-ef82-0000f6b46348","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://github.com/dustinsergio/MyProgramAmbitious/releases/download/v1.0.0/ScreenConnectSetup.exe","pattern":"[url:value = 'https://github.com/dustinsergio/MyProgramAmbitious/releases/download/v1.0.0/ScreenConnectSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffb0b3fa-9702-4f03-2e63-000048acfda0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://github.com/dustinsergio/connect2/releases/download/v2.0.0/ScreenConnectSetup.exe","pattern":"[url:value = 'https://github.com/dustinsergio/connect2/releases/download/v2.0.0/ScreenConnectSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cea42e5-8fce-89e9-1963-0000d9cf7148","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://79.106.231.174:57989/i","pattern":"[url:value = 'http://79.106.231.174:57989/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3069985f-886e-187f-ca69-00001e60f5fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.6.45:53526/bin.sh","pattern":"[url:value = 'http://182.119.6.45:53526/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ad7c800-739d-8954-9902-0000efe25fb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.215.27:44835/bin.sh","pattern":"[url:value = 'http://120.84.215.27:44835/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca557bcb-61c0-ed97-9423-0000be463983","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://85.137.246.220:9705/linux","pattern":"[url:value = 'http://85.137.246.220:9705/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da66f71c-b777-8d0b-e605-00001e66ac77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://121.40.213.105:9384/linux","pattern":"[url:value = 'http://121.40.213.105:9384/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63d97196-0f4e-90ab-1adf-0000c4c3a348","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://119.117.108.130:33716/i","pattern":"[url:value = 'http://119.117.108.130:33716/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28d07c51-c028-378a-d321-00009c51e52f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://211.229.127.206:53013/i","pattern":"[url:value = 'http://211.229.127.206:53013/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e86b299d-e167-c0a6-23e8-00009f9b49de","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.159.178:51500/i","pattern":"[url:value = 'http://61.52.159.178:51500/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a567aeb3-d0e1-eda8-d4c0-0000d03c60de","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://36.5.87.54:4370/i","pattern":"[url:value = 'http://36.5.87.54:4370/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3483c000-84d1-2d98-abd7-00004b3d404e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.103.241:51367/bin.sh","pattern":"[url:value = 'http://222.138.103.241:51367/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--278f8543-8515-95c1-28a7-0000bd5984af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.51.201:37109/bin.sh","pattern":"[url:value = 'http://182.117.51.201:37109/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0accfd3-c6f7-f702-9685-0000e8bbea65","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.49.31:47819/i","pattern":"[url:value = 'http://182.114.49.31:47819/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--993203fe-d740-23b4-792f-0000a8d619ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.247.247:43842/i","pattern":"[url:value = 'http://182.121.247.247:43842/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68984925-2947-254a-f853-0000159f2ef7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.51.201:37109/i","pattern":"[url:value = 'http://182.117.51.201:37109/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84dbf78f-925f-eee1-b32d-000054e365b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.178.23.194:35659/bin.sh","pattern":"[url:value = 'http://42.178.23.194:35659/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7d12bad-67a4-008e-47da-0000a2729471","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.137.206.166:45619/i","pattern":"[url:value = 'http://61.137.206.166:45619/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9dd9c08-c14d-4412-7a8e-0000dff37fb0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.178.23.194:35659/i","pattern":"[url:value = 'http://42.178.23.194:35659/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b17b02ff-acb1-83d2-01a6-0000bf0fbbc4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.217.123.198:46902/bin.sh","pattern":"[url:value = 'http://60.217.123.198:46902/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84686b51-d63c-df40-a68f-00005c685aab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://85.108.86.149:50272/i","pattern":"[url:value = 'http://85.108.86.149:50272/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1498cf99-b285-9a0e-4d26-0000b4021632","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.178.128:40955/bin.sh","pattern":"[url:value = 'http://123.14.178.128:40955/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--928878f5-e3d9-f197-f99b-000043fc0ceb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.178.128:40955/i","pattern":"[url:value = 'http://123.14.178.128:40955/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e98ed1f-fa19-8a13-46dd-0000f608372a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.84.173:60970/bin.sh","pattern":"[url:value = 'http://61.53.84.173:60970/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4d97589-dfee-5683-85f3-0000b7d582c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.41.147:38217/i","pattern":"[url:value = 'http://125.43.41.147:38217/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adc85ef4-9518-4a7e-9ed3-0000f73ca457","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.93.0:38525/i","pattern":"[url:value = 'http://163.142.93.0:38525/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0997e9a2-e5ee-b592-01be-0000cf5d82eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.84.173:60970/i","pattern":"[url:value = 'http://61.53.84.173:60970/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--073aa809-ece4-fec5-3ff0-00005b759175","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://178.132.198.200/payload_v10.sh","pattern":"[url:value = 'http://178.132.198.200/payload_v10.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e1eabfa-3f2d-f186-dfff-0000fbd9eb77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://www.2goelectricity.cloud/MSI_PRO.png","pattern":"[url:value = 'http://www.2goelectricity.cloud/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbcf7aea-00b1-0868-3cd0-00008e085e4e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://62.60.226.185/tu3929.exe","pattern":"[url:value = 'https://62.60.226.185/tu3929.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87c7569f-c184-6907-59af-0000ebd81725","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://fdrv.beeyuskincare.co.nz/download.php/Complete_Package_Inspection_And_Damage_Verification_Mp4?f=66898a522ebd09a431f48ede0d3df5e8","pattern":"[url:value = 'https://fdrv.beeyuskincare.co.nz/download.php/Complete_Package_Inspection_And_Damage_Verification_Mp4?f=66898a522ebd09a431f48ede0d3df5e8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4e0b851-960e-106d-10d7-0000151ec715","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://23.94.148.3/70/weareinthebestplaceforbetterfuturecomingforme.hta","pattern":"[url:value = 'https://23.94.148.3/70/weareinthebestplaceforbetterfuturecomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0993a88f-ff48-6d35-de84-000011c7ed05","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://gaiadeqi.com/vlc1.zip","pattern":"[url:value = 'https://gaiadeqi.com/vlc1.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--118e4066-fab0-4dcc-e10a-00004255130f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://raw.githubusercontent.com/fdcsdwrqass/microsoft/main/microsoft.exe","pattern":"[url:value = 'https://raw.githubusercontent.com/fdcsdwrqass/microsoft/main/microsoft.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7e1e8d0-e0fb-05e1-010a-00003855db43","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_e646a62aa048cacd.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_e646a62aa048cacd.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9a1598f-f6b4-7efa-a31a-0000d4b76c89","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://balanced-red-emhnkdfj-dp7g2kvqxx8n.edgeone.dev/","pattern":"[url:value = 'https://balanced-red-emhnkdfj-dp7g2kvqxx8n.edgeone.dev/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f1e5d72-2b15-2afe-798e-00005619e7d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://profitable-pink-0y9btnew-dpk6vqe6eheo.edgeone.dev/","pattern":"[url:value = 'https://profitable-pink-0y9btnew-dpk6vqe6eheo.edgeone.dev/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13a8d519-ee00-c249-3d6f-0000c3c3c7c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://107.174.251.112/img/3.jpg","pattern":"[url:value = 'http://107.174.251.112/img/3.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--117c1a04-da3b-a792-c934-00001ae12aaf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vibecoders.vip/softwaretech","pattern":"[url:value = 'http://vibecoders.vip/softwaretech']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a5c1b51-67ee-8c26-38d5-000052e3d706","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://art-jewels.de/wp-includes/Text/jzoctxl/u1jifzw/jnmpdkg/UG1crypted.ps1","pattern":"[url:value = 'https://art-jewels.de/wp-includes/Text/jzoctxl/u1jifzw/jnmpdkg/UG1crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cd56784-d796-aa0b-8e91-0000ce4f2d95","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://somostask.co/stego_2pu3tp48pp.png","pattern":"[url:value = 'https://somostask.co/stego_2pu3tp48pp.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c66d779a-994e-c35f-7dbb-0000578f8a9a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.220.201:34645/bin.sh","pattern":"[url:value = 'http://61.53.220.201:34645/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17fe319c-6a32-6e6a-2150-00009c27dc84","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.183.51.162:34711/bin.sh","pattern":"[url:value = 'http://119.183.51.162:34711/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27e2561e-6cb6-57f8-d823-0000402bb275","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.220.84.239:55052/bin.sh","pattern":"[url:value = 'http://27.220.84.239:55052/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c392672-7774-0e7e-66ed-00003fd8f290","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://paretandassociates.screenconnect.com/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest&c=Eye%20Clinic&c=&c=Surgery&c=Personal&c=&c=&c=&c=","pattern":"[url:value = 'https://paretandassociates.screenconnect.com/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest&c=Eye%20Clinic&c=&c=Surgery&c=Personal&c=&c=&c=&c=']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db8dcaef-165c-1f61-b57c-0000f4d412b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.5.10.102:53641/bin.sh","pattern":"[url:value = 'http://42.5.10.102:53641/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c8f79b9-a6a5-4483-385e-0000bd03dc63","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://www.zenledgerpolicy.com","pattern":"[url:value = 'https://www.zenledgerpolicy.com']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--912be624-0eaa-1a7e-c417-00006faa0629","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://shortsouth.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest","pattern":"[url:value = 'https://shortsouth.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--582eca8c-1e3f-b811-8db0-0000f19a9519","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://docuslutmentadoonline.top/reference/","pattern":"[url:value = 'https://docuslutmentadoonline.top/reference/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8e367df-a004-5aad-b1af-0000611c79e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://robinhoodwallet.dervano.vu/windows/","pattern":"[url:value = 'https://robinhoodwallet.dervano.vu/windows/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f62236a-fdbf-caf3-372b-0000ac237c12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://swanrecovery.com","pattern":"[url:value = 'https://swanrecovery.com']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca89969f-f9f0-6d36-21ce-0000b146acb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://helnivo.vu/FinalCD","pattern":"[url:value = 'https://helnivo.vu/FinalCD']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c92c4e3-ac05-c0d6-7aee-0000ee45cbf9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://docuuumennnntonline.top/reference/","pattern":"[url:value = 'http://docuuumennnntonline.top/reference/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b495edd5-b55e-0ebc-7436-0000148158ab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://azlvaka.vu/access","pattern":"[url:value = 'https://azlvaka.vu/access']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44e5bb27-5b49-6d2c-ab51-00001e25740b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://multiculturalbridge.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest","pattern":"[url:value = 'https://multiculturalbridge.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--595f0557-2176-0629-5631-00001b26c5e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.220.84.239:55052/i","pattern":"[url:value = 'http://27.220.84.239:55052/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6684ddb7-ffe3-0d25-e639-0000ea245136","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ad61ec","pattern":"[url:value = 'http://5.182.210.174/ad61ec']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--999e2779-d4d1-31b6-296c-000062241ace","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c4a84f","pattern":"[url:value = 'http://5.182.210.174/c4a84f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ee00321-9a91-c10c-d396-000046ded88c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/3eafe3","pattern":"[url:value = 'http://5.182.210.174/3eafe3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78f479af-4835-b8ce-cc4b-0000627fab31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/fc2db6","pattern":"[url:value = 'http://5.182.210.174/fc2db6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4485a36-bc3c-7464-0ed2-0000ecc3a014","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9c9685","pattern":"[url:value = 'http://5.182.210.174/9c9685']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--992ba805-298d-22a5-36bc-000038df487d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6a40ae","pattern":"[url:value = 'http://5.182.210.174/6a40ae']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91139d9c-8778-8cfe-4575-0000402eb122","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b3eb09","pattern":"[url:value = 'http://5.182.210.174/b3eb09']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30c06043-0d9d-3f61-fcde-00007833df10","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/026141","pattern":"[url:value = 'http://5.182.210.174/026141']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adfa5ab1-c796-3768-25af-00002dd67ff8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/939936","pattern":"[url:value = 'http://5.182.210.174/939936']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2e278cd-208b-ed5a-57eb-0000c4e330b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f287aa","pattern":"[url:value = 'http://5.182.210.174/f287aa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--031fa63d-8aca-158e-098d-0000ad9025f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b97872","pattern":"[url:value = 'http://5.182.210.174/b97872']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a9326b6-a701-3d4a-7e4d-00009f7d86cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9a3160","pattern":"[url:value = 'http://5.182.210.174/9a3160']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00c35337-1ff2-5ef8-704d-000046a92b26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://github.com/atilabyte/golang/raw/refs/heads/master/scripts/install.sh","pattern":"[url:value = 'https://github.com/atilabyte/golang/raw/refs/heads/master/scripts/install.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab661674-2307-175c-5003-00001fc7f433","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.248.10:58244/bin.sh","pattern":"[url:value = 'http://182.126.248.10:58244/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66e96bc9-44dd-9036-bd3c-000035d700b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://85.108.86.149:50272/bin.sh","pattern":"[url:value = 'http://85.108.86.149:50272/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81e75554-b249-b4ae-6393-000066611d89","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_46acc204d4e52963.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_46acc204d4e52963.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1420190-e878-3b9d-a71f-000088acec62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/bins/parm64","pattern":"[url:value = 'http://31.77.227.121/bins/parm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e48ce00-1c1a-d307-f2ea-0000d9087642","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.5.10.102:53641/i","pattern":"[url:value = 'http://42.5.10.102:53641/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a19510ad-326e-5da9-984d-0000ef71fea6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.141:33052/bin.sh","pattern":"[url:value = 'http://46.236.65.141:33052/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72080ddc-4829-0858-1a81-0000cb907ff7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.44.60:34879/i","pattern":"[url:value = 'http://182.113.44.60:34879/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--006402b5-92e5-191b-0766-00004f0abe96","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.248.10:58244/i","pattern":"[url:value = 'http://182.126.248.10:58244/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfcf0717-3250-0c72-32c5-0000a985b972","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.147.247:47891/i","pattern":"[url:value = 'http://115.56.147.247:47891/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95f082bf-895c-15f3-863a-00008e7cf4c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.150.195.235/newpath.sh","pattern":"[url:value = 'http://45.150.195.235/newpath.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9104d0b-a8e8-c861-d3bf-0000a0438b8a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.168.114.203:46828/bin.sh","pattern":"[url:value = 'http://175.168.114.203:46828/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42731c28-9d9c-d0b1-4efa-0000ed532f6f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.168.114.203:46828/i","pattern":"[url:value = 'http://175.168.114.203:46828/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddcd4b9c-cab7-b3b3-6b5e-0000f6272c24","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://flooriscoveringworld.com/bin.exe","pattern":"[url:value = 'https://flooriscoveringworld.com/bin.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c09a891f-fa0d-31f4-4792-00001997f87b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.135.216:60668/i","pattern":"[url:value = 'http://115.62.135.216:60668/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--113e6c16-36c2-2f3f-d294-0000e4f4a37d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://wylkpznq.xyz/hukl/cp/bin.exe","pattern":"[url:value = 'https://wylkpznq.xyz/hukl/cp/bin.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3e33e1b-4b90-ec9f-9b63-00009cc3a133","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://somostask.co/Candy.png","pattern":"[url:value = 'https://somostask.co/Candy.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c942cbd-9494-79f6-4560-0000f7a31452","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://pub-153d2a9e026942c4aff3b3aca8f80952.r2.dev/vceolaqcvj.png","pattern":"[url:value = 'https://pub-153d2a9e026942c4aff3b3aca8f80952.r2.dev/vceolaqcvj.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87daa203-932d-0b59-b42d-00000c071ed1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-8f07b712b50246eca5982f64bd695eea.r2.dev/bxaigui.png","pattern":"[url:value = 'https://pub-8f07b712b50246eca5982f64bd695eea.r2.dev/bxaigui.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83bcfa5e-e74a-9f83-31fa-0000bed0b007","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/646d52","pattern":"[url:value = 'http://5.182.210.174/646d52']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c9e5160-eb61-d2f9-3e7c-000008b65ce4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e27047","pattern":"[url:value = 'http://5.182.210.174/e27047']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a0003f4-2e99-b4ff-b355-00006d96cd5b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e6a806","pattern":"[url:value = 'http://5.182.210.174/e6a806']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a354c1a0-a3c1-0fe8-980f-000093e96b8f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/908e60","pattern":"[url:value = 'http://5.182.210.174/908e60']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--072f2188-efd9-793e-f1bf-00003c1e272b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/833d99","pattern":"[url:value = 'http://5.182.210.174/833d99']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d14cb64-c21c-b5bc-9b52-0000897cfc87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f61d73","pattern":"[url:value = 'http://5.182.210.174/f61d73']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f253aca-4827-e098-8e94-000006e35c29","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6711b4","pattern":"[url:value = 'http://5.182.210.174/6711b4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad264fa5-1aac-7a26-5bfc-00008e290cbf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/229db9","pattern":"[url:value = 'http://5.182.210.174/229db9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a94d0a6-3322-3bce-26ba-00005fd9f614","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/59e4b9","pattern":"[url:value = 'http://5.182.210.174/59e4b9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da5a0c31-0cf4-64f8-99d8-0000f6d43d35","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1e596c","pattern":"[url:value = 'http://5.182.210.174/1e596c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19012bb1-4822-666c-b957-0000319d1c6f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/63d2dd","pattern":"[url:value = 'http://5.182.210.174/63d2dd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae44a27d-7a6b-5972-4ae2-000045dfe5e1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a9eeb4","pattern":"[url:value = 'http://5.182.210.174/a9eeb4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4a7e37a-6197-ede4-528f-000090f13e88","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.58.177.63:33235/i","pattern":"[url:value = 'http://115.58.177.63:33235/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--048fc7b4-f0c7-99eb-1b65-0000cf9dcc5e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/app330.png","pattern":"[url:value = 'https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/app330.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c97dc31a-24d3-192f-1f27-00002ba4eacd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://pub-45a83f302a1943ed8d62418c2af947ef.r2.dev/bin001.png","pattern":"[url:value = 'https://pub-45a83f302a1943ed8d62418c2af947ef.r2.dev/bin001.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46ad42ea-9807-64d0-cc43-00003a2be24c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://178.16.53.176/PW/EZcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/PW/EZcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee8f5a94-4474-cc2a-bd3e-0000333f7e03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://178.16.53.176/PW/pr2crypted.ps1","pattern":"[url:value = 'http://178.16.53.176/PW/pr2crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42c6b1d0-0e19-884a-673a-0000f62688a0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://178.16.53.176/PW/prcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/PW/prcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95c969e9-ba37-3cb4-fcb3-000004c204ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://www.2goelectricity.cloud/img_122332.png","pattern":"[url:value = 'http://www.2goelectricity.cloud/img_122332.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff9cc55c-d461-d07e-3221-0000dee46ee1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.89.53:48165/bin.sh","pattern":"[url:value = 'http://182.112.89.53:48165/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03ee0b5f-14e2-4ed7-eeac-000037d03a94","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.130.209.58:35031/i","pattern":"[url:value = 'http://182.130.209.58:35031/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afe626ff-03bc-439b-62b7-0000c059b585","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.105.216:51325/bin.sh","pattern":"[url:value = 'http://222.137.105.216:51325/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--138feb62-04fe-508a-1056-00007fa8ee65","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.89.53:48165/i","pattern":"[url:value = 'http://182.112.89.53:48165/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32ba1677-5eca-cc09-2380-000092e4d40c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.53.176/DVB/ugcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DVB/ugcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a862e32-b0c6-6b1f-fdb8-0000dc455b03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.53.176/DVB/eecrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DVB/eecrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--544176f6-ad4a-0ae7-e0fb-00003d81e5ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://kits.frog.tw/Images/stego_jxdqj7fw9j.png","pattern":"[url:value = 'https://kits.frog.tw/Images/stego_jxdqj7fw9j.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79234fc4-41cd-6db2-773a-0000b75659f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://gaiadeqi.com/clc.zip","pattern":"[url:value = 'https://gaiadeqi.com/clc.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15368973-e307-f07d-e5b6-0000873a2529","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.105.216:51325/i","pattern":"[url:value = 'http://222.137.105.216:51325/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4588abe6-0a81-4053-85d6-0000f78987c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.2.50.30:54263/bin.sh","pattern":"[url:value = 'http://116.2.50.30:54263/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9dd3435-5b58-03f7-b67d-0000959e3fa2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.254.53:38226/bin.sh","pattern":"[url:value = 'http://115.50.254.53:38226/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73265546-4f9d-273f-8623-000095a09843","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.225.241.153:52809/i","pattern":"[url:value = 'http://42.225.241.153:52809/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--678947cd-bba9-f312-5b42-0000465da29c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.2.50.30:54263/i","pattern":"[url:value = 'http://116.2.50.30:54263/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e71daca9-067f-1c24-4414-0000436bbc9a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.254.53:38226/i","pattern":"[url:value = 'http://115.50.254.53:38226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b81e6727-45bb-88d1-157d-000019c7d570","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.7.217.91:35797/bin.sh","pattern":"[url:value = 'http://42.7.217.91:35797/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16a286c2-4d88-9af6-e81e-0000335cfa9f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://162.255.251.91:57427/bin.sh","pattern":"[url:value = 'http://162.255.251.91:57427/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df0929ed-a628-d5b5-8d52-000068d621cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.135.216:60668/bin.sh","pattern":"[url:value = 'http://115.62.135.216:60668/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ca05231-098b-d3a0-59f8-00008f84565b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.93.81:51284/i","pattern":"[url:value = 'http://163.142.93.81:51284/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--640ab228-b583-af21-56fa-0000f40e77b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://14.107.121.45:50511/bin.sh","pattern":"[url:value = 'http://14.107.121.45:50511/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85247879-129b-9bc7-940e-000074b301db","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.225.241.153:52809/bin.sh","pattern":"[url:value = 'http://42.225.241.153:52809/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ddf0a8d-624f-1d32-e116-0000f118ea9f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://162.255.251.91:57427/i","pattern":"[url:value = 'http://162.255.251.91:57427/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b99a412-ba8c-e94b-bcdf-0000a86c6036","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://14.107.121.45:50511/i","pattern":"[url:value = 'http://14.107.121.45:50511/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b6fe0d0-9b03-3901-c599-0000fa8cffb0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.236.118.216:50033/i","pattern":"[url:value = 'http://113.236.118.216:50033/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--688a4f9a-2a6f-6041-275d-00007e7e4114","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.56.136.70:46446/i","pattern":"[url:value = 'http://42.56.136.70:46446/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24f08b43-fbc9-8f38-c09c-0000e360c58f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.51.4.93:56227/i","pattern":"[url:value = 'http://115.51.4.93:56227/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6c42c53-b012-269b-1bb6-00003fb4b8b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://41.201.226.25:57585/i","pattern":"[url:value = 'http://41.201.226.25:57585/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--228b9cac-11d7-ae00-fa9d-0000838a7e36","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.207.216.59:45025/i","pattern":"[url:value = 'http://27.207.216.59:45025/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2720583-2589-05e6-c38c-0000d47904f0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.139.113:60057/bin.sh","pattern":"[url:value = 'http://59.96.139.113:60057/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--485fca4e-13af-af9c-ed44-000044b3968d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.248.174.58:54368/i","pattern":"[url:value = 'http://112.248.174.58:54368/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08d92283-faf0-dd8d-e6b0-00004fb8cc2f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.209.22:37617/bin.sh","pattern":"[url:value = 'http://42.230.209.22:37617/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88ca3871-3d99-afee-418a-0000cd6bd014","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.209.22:37617/i","pattern":"[url:value = 'http://42.230.209.22:37617/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02d686da-5a2c-9ea4-0db8-00007601bd66","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.212.220:54561/bin.sh","pattern":"[url:value = 'http://115.57.212.220:54561/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27b6a766-0817-f3dc-1eb8-00007b68ce8c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://140.237.7.157:41787/i","pattern":"[url:value = 'http://140.237.7.157:41787/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29f7cb20-e5df-614a-39d7-0000c7ec6a5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.212.220:54561/i","pattern":"[url:value = 'http://115.57.212.220:54561/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fd3e08f-9b77-318e-2c77-00005fbb69fe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.120.13.196:55125/bin.sh","pattern":"[url:value = 'http://182.120.13.196:55125/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--600f19e4-e58d-db3d-a24f-00005122893b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.235:41753/i","pattern":"[url:value = 'http://46.236.65.235:41753/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0b0e494-960e-f9e3-fdc1-0000ff1fd016","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.195.116:34313/bin.sh","pattern":"[url:value = 'http://123.9.195.116:34313/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45fa32c0-1cfb-da0e-5b30-0000d5c19cd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_ea0fdcdde83b1f61.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_ea0fdcdde83b1f61.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acb1a9b0-bab1-ae23-5a10-0000f28b3fa8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.54.253.22:60163/bin.sh","pattern":"[url:value = 'http://61.54.253.22:60163/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74abb301-a8fa-bda3-6261-00007b58a8f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.43.33:42422/bin.sh","pattern":"[url:value = 'http://182.121.43.33:42422/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ceb20f8-432d-7e2c-4d78-0000edfd7898","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.177.12:56227/i","pattern":"[url:value = 'http://123.12.177.12:56227/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9014ab2-e8e4-0158-adfd-00004f3df870","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.190.17.0:42140/bin.sh","pattern":"[url:value = 'http://123.190.17.0:42140/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f867940-800b-5571-fe4c-00007eca2cdb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.195.116:34313/i","pattern":"[url:value = 'http://123.9.195.116:34313/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5ff39f0-7fdd-cfbd-3648-0000623454fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.43.33:42422/i","pattern":"[url:value = 'http://182.121.43.33:42422/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fae832c-8484-b6a2-eee3-0000e4e1bf62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.54.253.22:60163/i","pattern":"[url:value = 'http://61.54.253.22:60163/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e951b9c-5aec-64cf-3087-0000292ca825","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.162.14:46510/bin.sh","pattern":"[url:value = 'http://182.123.162.14:46510/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38e3e9aa-182c-9d6b-861c-000096266647","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.61.118.232:57819/bin.sh","pattern":"[url:value = 'http://115.61.118.232:57819/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b66ebaa8-1bba-964f-05a3-0000973d43ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.52.24:36106/bin.sh","pattern":"[url:value = 'http://115.55.52.24:36106/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--336155c8-e404-68eb-479a-000096b37aba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.223.160:52129/bin.sh","pattern":"[url:value = 'http://123.9.223.160:52129/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf511864-c9d7-9d47-f6d1-000025dfdfa6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.162.14:46510/i","pattern":"[url:value = 'http://182.123.162.14:46510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a164071-0156-766d-03e0-0000a5e8bda7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.120.157:38424/bin.sh","pattern":"[url:value = 'http://61.53.120.157:38424/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8882e6a7-b3dd-c7e0-0f49-000023d3b8a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.52.24:36106/i","pattern":"[url:value = 'http://115.55.52.24:36106/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d63c89f-bfaa-728a-4c7c-0000d5a1d74a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.114.63.205:38557/bin.sh","pattern":"[url:value = 'http://119.114.63.205:38557/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b156d33-de5d-3a6d-b910-00006fd5effd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.151.74.149:48587/bin.sh","pattern":"[url:value = 'http://223.151.74.149:48587/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05c00f8e-d297-c1dc-077e-00000321ad5e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.203.243:47565/bin.sh","pattern":"[url:value = 'http://42.231.203.243:47565/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8266700f-0aab-d392-480c-000074c4bf8a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.120.157:38424/i","pattern":"[url:value = 'http://61.53.120.157:38424/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37e57ead-259d-dac6-ffe4-0000440ac925","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.248.174.58:54368/bin.sh","pattern":"[url:value = 'http://112.248.174.58:54368/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a08b3a85-4386-8cee-4311-00004c4b18b4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.223.160:52129/i","pattern":"[url:value = 'http://123.9.223.160:52129/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b14de4f6-a0be-5590-51f5-0000774041b8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.114.63.205:38557/i","pattern":"[url:value = 'http://119.114.63.205:38557/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2f70b09-bf27-f628-18a8-00003b8ac097","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.203.243:47565/i","pattern":"[url:value = 'http://42.231.203.243:47565/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f1bf748-a027-38f1-d20c-00005b67271f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.46.213.70:33401/i","pattern":"[url:value = 'http://125.46.213.70:33401/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7427ab81-3ace-1e90-a0e1-0000fc78e424","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.174.102.151:51009/i","pattern":"[url:value = 'http://175.174.102.151:51009/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ace10a8-19c3-d2d1-06e3-00001503b48a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.165.197.57:46174/i","pattern":"[url:value = 'http://175.165.197.57:46174/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--896a7bf2-7693-9b0f-fe1d-0000239acae2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.103.64:50547/bin.sh","pattern":"[url:value = 'http://42.224.103.64:50547/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3951249f-efac-269b-7e6e-0000efbd3a9e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.103.64:50547/i","pattern":"[url:value = 'http://42.224.103.64:50547/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bba3b094-a27b-b40b-54a7-0000a57609d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.5.254.164:39916/bin.sh","pattern":"[url:value = 'http://42.5.254.164:39916/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f619a74-3b33-0cea-e0ef-00001695b663","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.18.27:46218/i","pattern":"[url:value = 'http://125.44.18.27:46218/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8f166d4-799b-76ee-a390-000087ebd641","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/arm7","pattern":"[url:value = 'http://124.163.212.119:800/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99d3f1bc-cd95-8917-358a-00002a4f11d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/arm","pattern":"[url:value = 'http://124.163.212.119:800/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e6bdcbb-0217-8e2f-ac5a-0000ca9066e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/arc","pattern":"[url:value = 'http://124.163.212.119:800/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dff65642-ccd4-6079-eb1c-00003f57b124","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/arm6","pattern":"[url:value = 'http://124.163.212.119:800/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c897c68-15f5-95a3-8a07-0000a55cd234","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/mips","pattern":"[url:value = 'http://124.163.212.119:800/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa1df2a0-a1e7-d644-ec43-00006882f782","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/i686","pattern":"[url:value = 'http://124.163.212.119:800/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c95bbaa1-da9f-db7a-29cc-0000ce5fbc7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/mpsl","pattern":"[url:value = 'http://124.163.212.119:800/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51b9777e-874f-60bf-144b-000078dae4bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/ppc","pattern":"[url:value = 'http://124.163.212.119:800/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53ffc927-eea5-e2b7-7b93-0000fe4e9612","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/spc","pattern":"[url:value = 'http://124.163.212.119:800/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46ff07f8-c31f-6b73-341b-00002de21eca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/arm5","pattern":"[url:value = 'http://124.163.212.119:800/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4a61a38-168c-4cb6-36ad-000051960d44","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/x86_64","pattern":"[url:value = 'http://124.163.212.119:800/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30a548be-9daa-0f50-d633-0000a5aa04ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/m68k","pattern":"[url:value = 'http://124.163.212.119:800/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a99926ce-a372-baae-05bd-0000254a5689","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/i486","pattern":"[url:value = 'http://124.163.212.119:800/i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c0b46b0-57db-f6ed-4014-000000d98ac9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/x86","pattern":"[url:value = 'http://124.163.212.119:800/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3ffbb50-749a-0e15-f7a6-0000b2f9f303","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.154.212:42250/bin.sh","pattern":"[url:value = 'http://115.62.154.212:42250/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acabaf44-062a-8258-0d5d-0000eb7eba58","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.107.210.253:44599/bin.sh","pattern":"[url:value = 'http://175.107.210.253:44599/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f673d1ab-9391-b3e8-3b9e-000070742301","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.217.161.106:41462/bin.sh","pattern":"[url:value = 'http://27.217.161.106:41462/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99115be5-d8f9-2046-d281-000068a0f311","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://93.113.166.57:59924/bin.sh","pattern":"[url:value = 'http://93.113.166.57:59924/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b53a294-1288-44bb-a1bd-0000603f8b2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.154.212:42250/i","pattern":"[url:value = 'http://115.62.154.212:42250/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f7778a1-4e4c-dfff-9e38-0000054b65f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.100.50:44024/bin.sh","pattern":"[url:value = 'http://115.56.100.50:44024/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24682dc4-8d6c-f729-1a28-00000193c893","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.100.50:44024/i","pattern":"[url:value = 'http://115.56.100.50:44024/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--add5cca7-e799-a54f-fe39-0000b9b7b0ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.3.106:49988/bin.sh","pattern":"[url:value = 'http://125.40.3.106:49988/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d70ea09-3a31-32c1-bbfc-00000f331476","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/lilin.sh","pattern":"[url:value = 'http://124.163.212.119:800/lilin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95942b6e-4321-8c6b-7931-0000372d0925","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.8.162.45:59164/i","pattern":"[url:value = 'http://123.8.162.45:59164/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f2c9d5e-f233-cf71-d4c1-00006463de3f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://93.113.166.57:59924/i","pattern":"[url:value = 'http://93.113.166.57:59924/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b2bd328-6ba8-3ebf-38bd-0000c4813d31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.84.138:35880/bin.sh","pattern":"[url:value = 'http://182.127.84.138:35880/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c36a3a7d-9bc3-2f88-79f6-00002091e851","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.3.106:49988/i","pattern":"[url:value = 'http://125.40.3.106:49988/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b18caa8-775c-137a-53fe-00000164eeff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.97.100.192:59504/i","pattern":"[url:value = 'http://210.97.100.192:59504/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c51c6aaa-bb3b-07cf-6d08-0000ab8a42bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.84.138:35880/i","pattern":"[url:value = 'http://182.127.84.138:35880/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7db19f5-2d6e-f349-8271-0000cd785606","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.117.108.130:33716/bin.sh","pattern":"[url:value = 'http://119.117.108.130:33716/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4105f5de-1bdf-159b-67f8-00006ac0bca2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.162.38.51:34372/i","pattern":"[url:value = 'http://60.162.38.51:34372/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b63d6675-66e2-0f5f-6456-0000cd836f93","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.20.246:39870/i","pattern":"[url:value = 'http://182.116.20.246:39870/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47b9d10b-9aef-2326-4026-0000d2bd557e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.225.201.235:59633/i","pattern":"[url:value = 'http://42.225.201.235:59633/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bda9eeab-552f-7648-9601-00004eac32bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://78.25.157.124:39654/bin.sh","pattern":"[url:value = 'http://78.25.157.124:39654/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4c071d2-d62e-df8c-5ba9-0000d73b2e53","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.163.117:50795/bin.sh","pattern":"[url:value = 'http://105.186.163.117:50795/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--617653f6-52fc-8d3b-c07c-00006dcf9033","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.163.117:50795/i","pattern":"[url:value = 'http://105.186.163.117:50795/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdb19e7d-d9de-bd09-d8a7-0000fbfb9aee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.234.219.153:60517/i","pattern":"[url:value = 'http://124.234.219.153:60517/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e95ff55b-b3ad-65a9-4f1c-00000680dd8b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.123.78:39336/bin.sh","pattern":"[url:value = 'http://27.215.123.78:39336/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b446d77a-e647-bc35-67ce-0000fcd61fe1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.151.74.60:46830/bin.sh","pattern":"[url:value = 'http://175.151.74.60:46830/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2734d5ee-91e9-4a8f-d44b-00008af17dcc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.123.78:39336/i","pattern":"[url:value = 'http://27.215.123.78:39336/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cc5fcad-d14c-25e4-9a74-000076d1135f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://gaiadeqi.com/vlc.zip","pattern":"[url:value = 'https://gaiadeqi.com/vlc.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d085433-8176-4a16-1611-000002570e88","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.151.74.60:46830/i","pattern":"[url:value = 'http://175.151.74.60:46830/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1931b17a-1c83-f39c-3250-0000011037f2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pulgarinrealtor.com/weds/crypted.ps1","pattern":"[url:value = 'https://pulgarinrealtor.com/weds/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00bf21cf-66c4-05da-204f-0000b9c42f2d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://coconutoficial.com.br/image/stego_3d5qe0layt.png","pattern":"[url:value = 'https://coconutoficial.com.br/image/stego_3d5qe0layt.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d215717-aaa9-d66b-684b-0000548c2bcb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://brightwatch.mypi.co/AdobePDF.bat","pattern":"[url:value = 'https://brightwatch.mypi.co/AdobePDF.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c125752e-7ce1-27f9-6357-0000dfe97771","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://brightwatch.mypi.co/Adobeinstaller.msi","pattern":"[url:value = 'https://brightwatch.mypi.co/Adobeinstaller.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b34c325c-06e7-b248-75a0-000003cacb03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.177.182.116:42583/i","pattern":"[url:value = 'http://42.177.182.116:42583/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96ea7aae-05ce-cfaa-f7c5-0000b29faf48","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.78.182.86:43103/bin.sh","pattern":"[url:value = 'http://39.78.182.86:43103/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14fa4351-39b3-f547-9397-00001f3406f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://159.255.31.48:59678/bin.sh","pattern":"[url:value = 'http://159.255.31.48:59678/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29f2fb03-a5d2-cdbd-0876-000052cb5098","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.219.218:37565/bin.sh","pattern":"[url:value = 'http://120.28.219.218:37565/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e72aac5-8ad0-f0a9-8890-000089f155e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.44.156.36:37033/bin.sh","pattern":"[url:value = 'http://175.44.156.36:37033/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70c40838-ef74-e3e2-05c6-00008ade7d57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://raw.githubusercontent.com/Orukemer/success/refs/heads/main/eSrdgmg.txt","pattern":"[url:value = 'https://raw.githubusercontent.com/Orukemer/success/refs/heads/main/eSrdgmg.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20e4aed8-8da8-a1c7-6304-0000e00f9600","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://github.com/Orukemer/image/releases/download/Image/3.jpg","pattern":"[url:value = 'https://github.com/Orukemer/image/releases/download/Image/3.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e136c090-ae24-e4fe-1bdf-00000d25bf68","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://raw.githubusercontent.com/Orukemer/mercy/refs/heads/main/gIrhnSb.txt","pattern":"[url:value = 'https://raw.githubusercontent.com/Orukemer/mercy/refs/heads/main/gIrhnSb.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6ca56c8-8469-09af-c69f-0000fc9a53cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://45.225.135.160/downloads/3.jpg","pattern":"[url:value = 'http://45.225.135.160/downloads/3.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2835b36-5b63-278c-6487-0000f96e8a5b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3dd10d441773a7d5.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3dd10d441773a7d5.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b39d453e-a8df-edd8-eda6-0000d933d93e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3b3bcb0313f73fb0.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3b3bcb0313f73fb0.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eed0403a-d80f-38c0-098c-0000ab20b8d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://raw.githubusercontent.com/nezhahq/scripts/main/agent/install.sh","pattern":"[url:value = 'https://raw.githubusercontent.com/nezhahq/scripts/main/agent/install.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bc6b925-687e-1313-35d9-00008df0b3aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_542ee73385a72661.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_542ee73385a72661.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--835e4546-a194-bfd9-6aea-000081bc73ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://86.109.75.161:8080/lin1948WEx","pattern":"[url:value = 'http://86.109.75.161:8080/lin1948WEx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04fac299-1ffe-3ab3-7662-0000a210681b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.123.98.99:33747/Mozi.a","pattern":"[url:value = 'http://112.123.98.99:33747/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df068758-5ff3-8d2d-ccce-00000b7891c0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.36:53831/bin.sh","pattern":"[url:value = 'http://210.208.111.36:53831/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c14faa1-9a30-2e36-038a-0000d845afaf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.188.75.58:44319/i","pattern":"[url:value = 'http://196.188.75.58:44319/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d29b7ccf-30e1-4e1b-31a5-00008ad2e837","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.44.156.36:37033/i","pattern":"[url:value = 'http://175.44.156.36:37033/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2c82576-13e6-8a7b-9470-0000d946cbfb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://krem.mesoptik.com/static/modules/rh_TmgDpQ.bin","pattern":"[url:value = 'https://krem.mesoptik.com/static/modules/rh_TmgDpQ.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43292038-c0af-da03-fb0d-000009384d0b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://krem.mesoptik.com/static/modules/nzX44SVMY.bin","pattern":"[url:value = 'https://krem.mesoptik.com/static/modules/nzX44SVMY.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dfa41bb-0537-76f7-91ec-000089773134","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://colibrik.com/vlc.zip","pattern":"[url:value = 'https://colibrik.com/vlc.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2457642-d9e6-fbb3-d021-0000f8bb77bd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.81.174:41032/i","pattern":"[url:value = 'http://222.139.81.174:41032/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0ddf9ed-df0a-75c6-f22b-00006850f260","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.78.182.86:43103/i","pattern":"[url:value = 'http://39.78.182.86:43103/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c74e3d9-6560-24a0-a519-000054155e87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.233.94.135:35449/bin.sh","pattern":"[url:value = 'http://45.233.94.135:35449/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ba266b1-1855-ba91-6499-00003b95df67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.233.94.135:35449/i","pattern":"[url:value = 'http://45.233.94.135:35449/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bd9f9db-8432-d2a0-b9e4-00004fdbaff0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://202.163.107.242:56229/bin.sh","pattern":"[url:value = 'http://202.163.107.242:56229/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0bea273-efcc-faf4-55dc-00001229d3b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://159.255.31.48:59678/i","pattern":"[url:value = 'http://159.255.31.48:59678/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae111770-5fd6-ba46-aa53-0000cfb48934","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/ppc","pattern":"[url:value = 'http://91.192.81.41:8080/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73c877b0-d195-3740-9f59-0000c4e91e7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/x86_64","pattern":"[url:value = 'http://91.192.81.41:8080/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83a326be-cc2f-d0e8-e351-0000b7b7e741","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/x86","pattern":"[url:value = 'http://91.192.81.41:8080/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38b1d325-b8e3-5fda-3422-0000dc83d45b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/arm6","pattern":"[url:value = 'http://91.192.81.41:8080/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db43f527-2870-7c98-abd2-00004f6a10c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/sh4","pattern":"[url:value = 'http://91.192.81.41:8080/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bcef90f-cc73-ee1e-b429-00004688b74b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/mips","pattern":"[url:value = 'http://91.192.81.41:8080/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a129b9f-f883-f292-9799-000063359880","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/ppc440","pattern":"[url:value = 'http://91.192.81.41:8080/ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7dc26c0-6789-d788-3280-00002962ced2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/x86_32","pattern":"[url:value = 'http://91.192.81.41:8080/x86_32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7e2cdd9-b8af-f148-7bf9-0000467e6191","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/m68k","pattern":"[url:value = 'http://91.192.81.41:8080/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fb6e3b3-7c8b-5e0d-4ca6-0000643fb33e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/arm7","pattern":"[url:value = 'http://91.192.81.41:8080/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e1c3fc6-2feb-f398-0093-00002d8bd901","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/mpsl","pattern":"[url:value = 'http://91.192.81.41:8080/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1b8829f-d464-e5fa-779a-0000ce367bb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/arm5","pattern":"[url:value = 'http://91.192.81.41:8080/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--667b91b2-a7f6-3bf3-47e7-00009d217c59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/arm","pattern":"[url:value = 'http://91.192.81.41:8080/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cce24f5-8943-dd66-3b90-0000ca4dfaf8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.152.10.88:45145/bin.sh","pattern":"[url:value = 'http://27.152.10.88:45145/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1525bd4-55a5-86fd-3c76-0000a2dc6cc4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.225.189.234:48747/bin.sh","pattern":"[url:value = 'http://105.225.189.234:48747/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8bf476a-c400-9d53-cda0-000055d07c5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.4.133:60713/i","pattern":"[url:value = 'http://125.41.4.133:60713/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70992961-67da-d2c9-5b73-000070f650c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/982cd0","pattern":"[url:value = 'http://5.182.210.174/982cd0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eeb96d9c-3405-d894-9a1c-000062911a16","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d834af","pattern":"[url:value = 'http://5.182.210.174/d834af']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--028a1280-6731-f2f5-9ed1-000060da44c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/14acdf","pattern":"[url:value = 'http://5.182.210.174/14acdf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c15ae244-54a7-5663-0349-0000641349f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a0ec06","pattern":"[url:value = 'http://5.182.210.174/a0ec06']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37744b91-ba46-863b-be82-00004c42b4b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/597d4b","pattern":"[url:value = 'http://5.182.210.174/597d4b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2d49ec0-7c41-7e0b-c0d4-00000ba56265","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e04f45","pattern":"[url:value = 'http://5.182.210.174/e04f45']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f55c1155-b823-d3c1-fdd1-0000af0597cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/797dff","pattern":"[url:value = 'http://5.182.210.174/797dff']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14858b9b-68b0-7eab-cf0e-000040952484","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f82d25","pattern":"[url:value = 'http://5.182.210.174/f82d25']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3009232d-aff8-2841-ce7e-000003965fe8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1294b8","pattern":"[url:value = 'http://5.182.210.174/1294b8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c13bc35f-d9bb-f30b-820c-0000c24a414b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/370ef8","pattern":"[url:value = 'http://5.182.210.174/370ef8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c02403f8-7443-ae6a-9efe-0000588fd014","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/aede8d","pattern":"[url:value = 'http://5.182.210.174/aede8d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36387ce4-8dfd-ddca-785d-0000f115b380","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c060bd","pattern":"[url:value = 'http://5.182.210.174/c060bd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bc4842e-60e1-2293-a10e-0000054375e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/74d9f9","pattern":"[url:value = 'http://5.182.210.174/74d9f9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c725c74e-7961-c5f0-311f-000041cd706d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/79743e","pattern":"[url:value = 'http://5.182.210.174/79743e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7561d69b-354b-1a99-2333-0000e8e7219d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8a90f5","pattern":"[url:value = 'http://5.182.210.174/8a90f5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfde209f-4182-cb55-d38f-0000f6d661dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/08040b","pattern":"[url:value = 'http://5.182.210.174/08040b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04cc01de-3878-dc4a-836e-0000f8a8e24a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b4af73","pattern":"[url:value = 'http://5.182.210.174/b4af73']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--620a0a1e-ebe5-b2f0-9b41-0000f8f4ca22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/90e1de","pattern":"[url:value = 'http://5.182.210.174/90e1de']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9663bf23-d143-3df6-7be4-0000799b3f14","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7202b4","pattern":"[url:value = 'http://5.182.210.174/7202b4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19389b66-3612-1698-b377-0000029b196a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6ef423","pattern":"[url:value = 'http://5.182.210.174/6ef423']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7687d518-2a5b-5855-0cec-000069d090c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d97308","pattern":"[url:value = 'http://5.182.210.174/d97308']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72825d66-0001-b456-c01c-0000b48f335b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d19a37","pattern":"[url:value = 'http://5.182.210.174/d19a37']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89aaf4e0-60ce-702a-a0b7-00001b47fbc8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ae9a6b","pattern":"[url:value = 'http://5.182.210.174/ae9a6b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0107a68-24f8-1700-0525-00007ad55e8e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/5a848f","pattern":"[url:value = 'http://5.182.210.174/5a848f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d99d15cc-395f-6036-09b0-0000d5c823be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/50edcc","pattern":"[url:value = 'http://5.182.210.174/50edcc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e427499-3066-df66-5308-0000d5355ae1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/846cac","pattern":"[url:value = 'http://5.182.210.174/846cac']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87eb4a44-350d-9c16-581b-0000beabfc4a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ba641b","pattern":"[url:value = 'http://5.182.210.174/ba641b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6450097-3c83-a0d5-32eb-00000a9c5e02","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/85a4f4","pattern":"[url:value = 'http://5.182.210.174/85a4f4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcc2c4a8-a6bf-3137-c946-0000f9e1f85c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b6973a","pattern":"[url:value = 'http://5.182.210.174/b6973a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ab5890d-da73-ad75-3070-0000ade4b296","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/29ea88","pattern":"[url:value = 'http://5.182.210.174/29ea88']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5245a95b-9b5e-72e9-e3ee-0000edec3612","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/adb88f","pattern":"[url:value = 'http://5.182.210.174/adb88f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--408deab6-3994-42a6-860e-0000023d23b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b7a381","pattern":"[url:value = 'http://5.182.210.174/b7a381']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--180aace0-040d-5130-cefa-0000bff38fed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/24dc12","pattern":"[url:value = 'http://5.182.210.174/24dc12']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc500059-c231-2c6b-cd36-0000fc7001b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b8b233","pattern":"[url:value = 'http://5.182.210.174/b8b233']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e334fee-5f3b-bef6-e909-00009f3b8a56","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e7b8f7","pattern":"[url:value = 'http://5.182.210.174/e7b8f7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28d1e986-c6b8-43ba-708a-00006fa68853","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b87566","pattern":"[url:value = 'http://5.182.210.174/b87566']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30d2d840-298e-fdaa-7f9d-0000a5d034b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.152.10.88:45145/i","pattern":"[url:value = 'http://27.152.10.88:45145/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41fc036a-cced-fe16-b632-00002e10e6ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://tmpfiles.org/dl/1787161037.c81e7dba2550050a/wXw6relOYfKE/msi_pro.png","pattern":"[url:value = 'https://tmpfiles.org/dl/1787161037.c81e7dba2550050a/wXw6relOYfKE/msi_pro.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d5fb90f-194d-faf9-1050-000031f95b1a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://kee126.com/vlc.zip","pattern":"[url:value = 'https://kee126.com/vlc.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19f72245-4e00-5777-3efa-0000064c2b03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://130.12.209.153:51945/i","pattern":"[url:value = 'http://130.12.209.153:51945/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--639331b3-8b8d-2add-bf31-00009c35c0c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.61.118.232:57819/i","pattern":"[url:value = 'http://115.61.118.232:57819/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96811a4c-2dd0-a113-75e9-0000a76478f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.92.221:44835/i","pattern":"[url:value = 'http://163.142.92.221:44835/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--126e01ca-87a2-9b7a-a9e3-0000db5f2b34","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.36.34:39539/bin.sh","pattern":"[url:value = 'http://221.14.36.34:39539/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f61b2340-d0dd-eb3f-08b7-0000b0207615","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pulgarinrealtor.com/crypted.ps1","pattern":"[url:value = 'https://pulgarinrealtor.com/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f9162d4-7c9f-d3d8-b0e9-0000ae3572ea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://onlypackaging.grupoinde.com/zz/crypted.ps1","pattern":"[url:value = 'https://onlypackaging.grupoinde.com/zz/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cacda4f4-75a0-be71-1cb8-000069055988","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/74346a","pattern":"[url:value = 'http://5.182.210.174/74346a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d1558a8-c18e-4356-7b0f-00003ca27a8c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/58e1a8","pattern":"[url:value = 'http://5.182.210.174/58e1a8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1306e3b5-012d-df3e-92b1-0000abd37c5c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/905a41","pattern":"[url:value = 'http://5.182.210.174/905a41']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f1214ac-4eaa-44de-8438-0000f9034788","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/acaa53","pattern":"[url:value = 'http://5.182.210.174/acaa53']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--daac44ed-8da5-b3ae-1272-00001e396345","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/bfe63f","pattern":"[url:value = 'http://5.182.210.174/bfe63f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--922a675e-93e8-177e-b129-000063537230","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/4c7cb5","pattern":"[url:value = 'http://5.182.210.174/4c7cb5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57c8be5c-afd3-746b-1a76-00007e295b99","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/efeb39","pattern":"[url:value = 'http://5.182.210.174/efeb39']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be63e47b-65be-6d42-cd72-0000427bc4ab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7d4dfe","pattern":"[url:value = 'http://5.182.210.174/7d4dfe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c952eea1-917a-5b75-5b85-000069549c8a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/3eaa22","pattern":"[url:value = 'http://5.182.210.174/3eaa22']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1db5eeb-556d-78c9-9772-000064f801c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e3530c","pattern":"[url:value = 'http://5.182.210.174/e3530c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00d739a5-70f9-ff23-f37c-00003df610e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/89e244","pattern":"[url:value = 'http://5.182.210.174/89e244']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6e7516f-57fb-724a-695b-00002a33d28b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/699b25","pattern":"[url:value = 'http://5.182.210.174/699b25']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3011ef7-ada6-4a63-7e55-0000e7bb2f01","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.36.34:39539/i","pattern":"[url:value = 'http://221.14.36.34:39539/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80d44ca4-7246-6ec6-fb7e-0000f775a656","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.87.135:47543/i","pattern":"[url:value = 'http://125.47.87.135:47543/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7140dba-d368-f673-a64f-000093cb948f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://tmpfiles.org/wXw6relOYfKE/msi_pro.png","pattern":"[url:value = 'https://tmpfiles.org/wXw6relOYfKE/msi_pro.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e0d23de-f667-4843-759c-0000b3795656","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://195.177.94.139/Xloadfile/bin.exe","pattern":"[url:value = 'http://195.177.94.139/Xloadfile/bin.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b9b6442-af05-2446-873b-0000e124f874","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://colibrik.com/vlccz.zip","pattern":"[url:value = 'https://colibrik.com/vlccz.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91c7cb87-d27e-9e37-dabb-00003d0211ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.240.192:35535/bin.sh","pattern":"[url:value = 'http://42.239.240.192:35535/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6143ffce-a20b-527c-2193-000013b613dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.10.162:57743/bin.sh","pattern":"[url:value = 'http://125.45.10.162:57743/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed3dc715-5fd3-f267-d919-000032482940","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.63.144:39989/i","pattern":"[url:value = 'http://105.184.63.144:39989/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44573107-0034-025b-c5af-0000c26b908a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.240.192:35535/i","pattern":"[url:value = 'http://42.239.240.192:35535/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--faa20572-5573-3872-41fd-0000e6accfeb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.94.187:45764/bin.sh","pattern":"[url:value = 'http://222.139.94.187:45764/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6c2a2c1-25ec-a4f5-c588-00008d40c488","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.157.243.235:47252/bin.sh","pattern":"[url:value = 'http://91.157.243.235:47252/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--800151e9-1511-f6c0-7deb-000086e2f282","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.94.187:45764/i","pattern":"[url:value = 'http://222.139.94.187:45764/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5225f8d6-035b-6902-77b9-0000ea13b38c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.179.4.180:60816/i","pattern":"[url:value = 'http://42.179.4.180:60816/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dde6d48f-61ef-94fe-dbe5-0000b2225e98","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.171.234:44993/bin.sh","pattern":"[url:value = 'http://42.235.171.234:44993/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18a416b4-f49d-266d-30fd-0000fb02c15c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.184.140.145:34890/i","pattern":"[url:value = 'http://60.184.140.145:34890/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3633620d-24fa-61ad-0162-000014b5bef8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.85.28.108:53934/i","pattern":"[url:value = 'http://42.85.28.108:53934/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b3dd1e0-89b4-8369-81fb-00009ddf2d7a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.54.15.53:45156/bin.sh","pattern":"[url:value = 'http://42.54.15.53:45156/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a136c67-5d8e-4dd1-1f6f-0000f418fd14","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.52.206.146:52728/i","pattern":"[url:value = 'http://42.52.206.146:52728/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf522c73-ba82-8929-43f1-00001e95c81e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.188.75.58:44319/bin.sh","pattern":"[url:value = 'http://196.188.75.58:44319/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eb90b9a-6084-a125-a49f-000055bbaaf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://45.163.85.239:39124/bin.sh","pattern":"[url:value = 'http://45.163.85.239:39124/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d064785-7c98-38db-8da2-000045d3e07f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.52.206.146:52728/bin.sh","pattern":"[url:value = 'http://42.52.206.146:52728/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ebe9ee7-57e1-27bd-7e45-00009bc0ba1a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.54.15.53:45156/i","pattern":"[url:value = 'http://42.54.15.53:45156/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73854b15-41a4-9f16-912a-000060c4c527","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.130.209.58:35031/bin.sh","pattern":"[url:value = 'http://182.130.209.58:35031/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06dd4793-5461-fa0a-9ad2-00004c7934aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.127.49.161:56955/bin.sh","pattern":"[url:value = 'http://222.127.49.161:56955/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--990be191-5f0b-ec77-8642-0000d8108cd5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.234.61.90:34549/bin.sh","pattern":"[url:value = 'http://91.234.61.90:34549/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50180be2-1471-68b2-5213-0000ae8800ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.85.28.108:53934/bin.sh","pattern":"[url:value = 'http://42.85.28.108:53934/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--368437bf-c6b7-a8c8-7748-000040a61bb8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.127.49.161:56955/i","pattern":"[url:value = 'http://222.127.49.161:56955/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd209f27-f6c7-78e1-1ae1-000004c3a32b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.234.61.90:34549/i","pattern":"[url:value = 'http://91.234.61.90:34549/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4e80f53-ab14-6bf6-6f32-0000b3c5a376","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.5.26.85:51916/bin.sh","pattern":"[url:value = 'http://42.5.26.85:51916/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61125e88-3051-efc0-53f7-0000ccd10e65","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.130.28:47551/i","pattern":"[url:value = 'http://196.189.130.28:47551/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e1301fa-de05-16e4-08f2-0000d180c369","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.87.111.88:33491/bin.sh","pattern":"[url:value = 'http://42.87.111.88:33491/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eed3b46d-273f-edd1-f798-00002b0af5e1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.140.235:50010/bin.sh","pattern":"[url:value = 'http://42.235.140.235:50010/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeebacfa-9eb6-1486-617b-0000794f7b13","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://211.75.38.154:4194/i","pattern":"[url:value = 'http://211.75.38.154:4194/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dac89b7-2efe-08a4-2c87-000001466187","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.140.235:50010/i","pattern":"[url:value = 'http://42.235.140.235:50010/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c24dccf-d04c-19e7-e651-00007f0bfa2d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.171.234:44993/i","pattern":"[url:value = 'http://42.235.171.234:44993/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7861352-9815-0784-c70b-0000fe7ad820","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.148.182:60566/i","pattern":"[url:value = 'http://42.239.148.182:60566/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b9e13af-bdd0-2c79-a7dc-0000500aa0a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.178.45.124:57472/i","pattern":"[url:value = 'http://42.178.45.124:57472/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3039d9c9-610b-7d56-2261-000065f71e0f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.159.187.179:34226/i","pattern":"[url:value = 'http://183.159.187.179:34226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd33ae32-851c-cdd3-7b69-00005ccd84fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.159.187.179:34226/bin.sh","pattern":"[url:value = 'http://183.159.187.179:34226/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d717b29e-b7c2-6f47-39f8-000056db997e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://78.38.16.176:54968/i","pattern":"[url:value = 'http://78.38.16.176:54968/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7639b0db-7527-90f8-cb23-0000ce6ab9b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://58.21.251.3:42743/bin.sh","pattern":"[url:value = 'http://58.21.251.3:42743/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f296bfd6-1c35-674a-6e65-0000074388d8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.180.136.165:55956/i","pattern":"[url:value = 'http://59.180.136.165:55956/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57e0b4c0-3494-6529-1cdb-0000457a5a7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.244.41.109:53440/bin.sh","pattern":"[url:value = 'http://182.244.41.109:53440/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aae6e86-98c9-1f37-86a7-0000dbdeead0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.10.162:57743/i","pattern":"[url:value = 'http://125.45.10.162:57743/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afdc6276-4814-16b8-a53b-00007ca4c639","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.10.224.231:49757/i","pattern":"[url:value = 'http://123.10.224.231:49757/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3c9c52a-9faf-b69a-a600-00009599df24","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.49.187:35712/bin.sh","pattern":"[url:value = 'http://42.235.49.187:35712/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e39d7fc-0ed8-feeb-ecb8-0000d9d414d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.m68k","pattern":"[url:value = 'http://176.65.139.202/daredevil.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b6ecaaa-86c7-b107-4a38-0000bb86eea8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.sparc","pattern":"[url:value = 'http://176.65.139.202/daredevil.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b3f8d91-c6ba-d588-e7a8-000030ec5c19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.mipsel","pattern":"[url:value = 'http://176.65.139.202/daredevil.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cd5cac5-32e8-fcb4-6e1f-0000a4be08b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.armv4l","pattern":"[url:value = 'http://176.65.139.202/daredevil.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8705b98c-5aa7-b4e8-33f1-0000593446b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.i486","pattern":"[url:value = 'http://176.65.139.202/daredevil.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56f91fc6-5d9c-e958-4e09-0000686feb2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.arc","pattern":"[url:value = 'http://176.65.139.202/daredevil.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8f3ed90-fbe7-2cb7-0562-0000c601d3a1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/a.sh","pattern":"[url:value = 'http://176.65.139.202/a.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c795654-e198-1af4-0699-00005afbf084","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.sh4","pattern":"[url:value = 'http://176.65.139.202/daredevil.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--846e3409-64ca-80d5-332c-0000ea87c10d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.mipsrouter","pattern":"[url:value = 'http://176.65.139.202/daredevil.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ee3a847-1311-2d3d-e19e-0000de7e5bd6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.armv6l","pattern":"[url:value = 'http://176.65.139.202/daredevil.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--665997f6-6aa4-5a74-9cf2-00006988bf27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.x86_64","pattern":"[url:value = 'http://176.65.139.202/daredevil.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07f89906-746d-d4a2-1c5b-0000e31e7266","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.armv7l","pattern":"[url:value = 'http://176.65.139.202/daredevil.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5215e32a-750d-afd7-c666-0000d922c20e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.mips","pattern":"[url:value = 'http://176.65.139.202/daredevil.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35cefb84-c4f9-015a-a21d-000099de2106","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.armv5l","pattern":"[url:value = 'http://176.65.139.202/daredevil.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69e661d8-19a2-b6e3-7a9a-000042633ce4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.powerpc","pattern":"[url:value = 'http://176.65.139.202/daredevil.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a689a64-5ffb-4ed0-568d-0000736fadc2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.59.152:33986/bin.sh","pattern":"[url:value = 'http://125.47.59.152:33986/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7083b5aa-189a-ecc1-9462-0000cd9a150f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.234.219.153:60517/bin.sh","pattern":"[url:value = 'http://124.234.219.153:60517/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e39c0f91-fd82-93bb-9880-00007686542a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.49.187:35712/i","pattern":"[url:value = 'http://42.235.49.187:35712/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68636258-371e-4f97-c2ad-000015a90309","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.132.182.114:59660/bin.sh","pattern":"[url:value = 'http://123.132.182.114:59660/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--736cc10b-1322-50cf-ac68-00006ec66140","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.59.152:33986/i","pattern":"[url:value = 'http://125.47.59.152:33986/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11222c30-68b2-6590-d9b8-00003c4c8a65","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.228.140.10:33110/i","pattern":"[url:value = 'http://113.228.140.10:33110/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--474f49cc-238b-4053-a3f7-0000ab1b8280","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://nimblenumbers.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://nimblenumbers.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c83d114-3fd5-ce88-3fe2-000003cb689a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.132.182.114:59660/i","pattern":"[url:value = 'http://123.132.182.114:59660/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f21d4aa0-cbcd-bad6-43d7-0000449ed36a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.79.131:52303/i","pattern":"[url:value = 'http://42.231.79.131:52303/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b58e78b1-5735-b92e-21b9-0000dd0c8ce5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.sh4","pattern":"[url:value = 'http://94.154.43.181/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56b4184f-100b-5060-fcf9-0000c1a760c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.arm7","pattern":"[url:value = 'http://94.154.43.181/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccc8f1f0-0e72-31d1-5079-0000d9aaaccc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.mipsel","pattern":"[url:value = 'http://94.154.43.181/bot.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0dc9ae6-8fea-4c85-44d3-00005dd21513","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.ppc","pattern":"[url:value = 'http://94.154.43.181/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0761ebbe-e8fc-298e-db84-0000bc89ed5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.aarch64","pattern":"[url:value = 'http://94.154.43.181/bot.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54588c3b-4cb8-a263-b23f-00002ece410a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.i686","pattern":"[url:value = 'http://94.154.43.181/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08b61c24-23d5-3708-90d8-00000f47e07e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.arm","pattern":"[url:value = 'http://94.154.43.181/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1aeeb97-c837-637b-a6c4-000080ce4ff2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.x86_64","pattern":"[url:value = 'http://94.154.43.181/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82cc02f3-c6c8-ca99-81fd-0000e31064bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.mips","pattern":"[url:value = 'http://94.154.43.181/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9321d318-54fd-96c5-6340-0000003f3177","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/adbpersist.arm7","pattern":"[url:value = 'http://94.154.43.210/adbpersist.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3896cf5d-fb39-2987-e7bf-0000c51c0585","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/ppc","pattern":"[url:value = 'http://94.154.43.210/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17446498-566d-519c-a1fa-0000775687db","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/arc","pattern":"[url:value = 'http://94.154.43.210/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0aff381e-3f5b-c1a2-e0b7-0000d85398a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/arm7","pattern":"[url:value = 'http://94.154.43.210/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de8722a2-024d-c2ae-c951-0000fae49cdd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/mips","pattern":"[url:value = 'http://94.154.43.210/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7df80888-2274-f15a-0955-000060efffcd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/arm6","pattern":"[url:value = 'http://94.154.43.210/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dc42d0a-ef01-1db3-fd5e-000045c29c73","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/sh4","pattern":"[url:value = 'http://94.154.43.210/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0fc499f-93cb-7786-18a3-00009789f0e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/arm","pattern":"[url:value = 'http://94.154.43.210/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b55e46b-1e62-b895-33fb-000091e7f297","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/mpsl","pattern":"[url:value = 'http://94.154.43.210/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92ab1674-ddf2-3179-80cb-0000fa124a07","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/m68k","pattern":"[url:value = 'http://94.154.43.210/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80102f9b-a687-db84-4bf3-00000a9b3a36","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.70.235.87:40268/i","pattern":"[url:value = 'http://36.70.235.87:40268/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ad07104-fa7b-27c2-edf7-00004388772b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/spc","pattern":"[url:value = 'http://94.154.43.210/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4f15932-11a7-401e-cfb8-0000725a5023","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/arm5","pattern":"[url:value = 'http://94.154.43.210/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da9aca7b-b153-639e-be3e-00008d1d875b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/mips","pattern":"[url:value = 'http://94.154.43.85/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fff1d4b1-c2b3-89d7-caff-00001f0413e7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/armv6l","pattern":"[url:value = 'http://94.154.43.85/armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c0e44b3-57a9-3e1d-4a24-000040c3a2ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/i686","pattern":"[url:value = 'http://94.154.43.85/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa2df167-dd8b-9a27-c25f-0000f1961428","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/mipsel","pattern":"[url:value = 'http://94.154.43.85/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6eae5f0-bd6f-c89f-d986-000022643a57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/armv7l","pattern":"[url:value = 'http://94.154.43.85/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e808e3fc-83d4-4896-c8ab-00003320e7ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/amd64","pattern":"[url:value = 'http://94.154.43.85/amd64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3ea3215-c295-06b9-6c4b-000043347bf1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/x86","pattern":"[url:value = 'http://94.154.43.85/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12b4c409-9d88-f576-ddb8-0000983d1bec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/ppc64","pattern":"[url:value = 'http://94.154.43.85/ppc64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4dc8772-1093-a0a3-f776-000058a46937","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/armv5l","pattern":"[url:value = 'http://94.154.43.85/armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fda927f-142e-46d4-3822-00008eaab9be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.61.53.157:42588/Mozi.a","pattern":"[url:value = 'http://39.61.53.157:42588/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3c757a2-5881-d12d-8884-0000de7050e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.159.90.118/bin/support.client.exe","pattern":"[url:value = 'http://203.159.90.118/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7780072-6931-099d-2145-0000fddd0049","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.159.90.118/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://203.159.90.118/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d85783f-7554-638c-7d55-0000a17563cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://192.159.99.42/bin/support.client.exe","pattern":"[url:value = 'http://192.159.99.42/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44488e7b-0ec7-51ae-0794-000071d5be3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_1319bd61568f04ed.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_1319bd61568f04ed.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb652e09-0026-139f-e013-0000cd78e211","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://192.159.99.42/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://192.159.99.42/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8cfa1bf-142e-b616-9f80-000086b3aea2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e0207d","pattern":"[url:value = 'http://5.182.210.174/e0207d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bf135bc-e71c-4fe4-09d4-000050b942bd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d81575","pattern":"[url:value = 'http://5.182.210.174/d81575']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1841a6b-2082-e754-51e9-0000ea0cdc7c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/14f97a","pattern":"[url:value = 'http://5.182.210.174/14f97a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e5b0dac-27e4-b2e4-8051-00006d0317b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c02601","pattern":"[url:value = 'http://5.182.210.174/c02601']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6806881-343f-dc5d-2155-0000541d5660","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/61e952","pattern":"[url:value = 'http://5.182.210.174/61e952']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--780c51b9-a9eb-aa85-675e-000094efa077","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/005679","pattern":"[url:value = 'http://5.182.210.174/005679']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--884b6749-d840-8d85-7713-0000408f9611","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/98fab6","pattern":"[url:value = 'http://5.182.210.174/98fab6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2820f8a2-0530-ba43-8b73-0000c98187f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/829f73","pattern":"[url:value = 'http://5.182.210.174/829f73']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd6f93b9-071c-31ee-d41f-0000b99825dc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://v-k.com.ua/vcapcha.ps1","pattern":"[url:value = 'http://v-k.com.ua/vcapcha.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--515e4aa1-4457-c233-a135-0000aa89a9d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/197001","pattern":"[url:value = 'http://5.182.210.174/197001']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b17d0215-d806-33ee-9009-0000f2194b87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/70504f","pattern":"[url:value = 'http://5.182.210.174/70504f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e39cc98c-42be-f86e-044e-0000ffd814c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/2cd0c9","pattern":"[url:value = 'http://5.182.210.174/2cd0c9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--449232b6-a5d7-2df2-01de-0000c6d46151","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/0eede3","pattern":"[url:value = 'http://5.182.210.174/0eede3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c45bb50-e076-b99a-6074-0000994da93e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_9a5c49da1d9d1767.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_9a5c49da1d9d1767.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11700068-da25-8b36-574c-0000e2b7ae1b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.32.180/bin/support.client.exe","pattern":"[url:value = 'http://94.154.32.180/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a78b3582-c6fc-c704-85e4-0000ce9c12f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.32.180/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://94.154.32.180/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5bce7e5-5f43-2e1f-686b-000088b7cd9c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.68/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.68/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97a980d5-7ea0-06e0-f8e4-0000ebbd31e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.68/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.68/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d4949a4-a946-87a2-d1a7-000004bcbd77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.205/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.205/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbaac499-1065-ec36-09ff-00009f219ed6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.205/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.205/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acba074c-37f6-fb31-5a95-0000e903fdf3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.55.26.114:46700/i","pattern":"[url:value = 'http://116.55.26.114:46700/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dab7761-d210-fe5e-198c-00009c197185","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.225.189.234:48747/i","pattern":"[url:value = 'http://105.225.189.234:48747/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdfaa030-7e4b-8a17-e4f8-000023720718","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.94.220:54475/i","pattern":"[url:value = 'http://163.142.94.220:54475/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27c582fa-f898-7f80-4800-0000ae9e7f79","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.20.246:39870/bin.sh","pattern":"[url:value = 'http://182.116.20.246:39870/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08a59358-dc88-1eb9-3d17-00006a09b410","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://178.16.54.109/spamget.exe","pattern":"[url:value = 'http://178.16.54.109/spamget.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a91a6ddd-0126-c91a-85c9-00005c160ff4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.244.196:59371/bin.sh","pattern":"[url:value = 'http://222.142.244.196:59371/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--817c1070-a68b-ed82-fe64-0000b3f60239","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.228.208.46:56903/Mozi.a","pattern":"[url:value = 'http://113.228.208.46:56903/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2a81c22-4dd3-9268-b1d2-0000f1c5a165","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.180.144.211:51836/bin.sh","pattern":"[url:value = 'http://59.180.144.211:51836/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8340af0a-2149-0ecd-3a6a-0000a6a2214d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.244.196:59371/i","pattern":"[url:value = 'http://222.142.244.196:59371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1deccde2-23b8-53b1-d6d4-000089f8462d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.237.221:39602/i","pattern":"[url:value = 'http://125.42.237.221:39602/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ce9a0b0-d773-fd1b-212a-000046f95d17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://163.142.87.19:46712/bin.sh","pattern":"[url:value = 'http://163.142.87.19:46712/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e534a33-da55-f606-6f87-00002aafb928","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.230:33052/bin.sh","pattern":"[url:value = 'http://46.236.65.230:33052/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11157509-1edc-84ed-925b-0000c4321768","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.230:33052/i","pattern":"[url:value = 'http://46.236.65.230:33052/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd350540-595d-5229-195c-0000af28f8d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.158.83:45555/bin.sh","pattern":"[url:value = 'http://61.52.158.83:45555/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5656b29-b801-cf0a-3b71-0000783b1faf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.61.46.143:53645/bin.sh","pattern":"[url:value = 'http://39.61.46.143:53645/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--111b31cd-aa22-40cc-7fd9-000021398ef2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.194.179.106:52016/bin.sh","pattern":"[url:value = 'http://115.194.179.106:52016/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--253d5e53-7535-d430-ed9f-0000e6dce9a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.59.235.202:51478/i","pattern":"[url:value = 'http://42.59.235.202:51478/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48c7ff8c-2b02-a245-da62-00008a7d0d63","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.201.178.159:48639/i","pattern":"[url:value = 'http://115.201.178.159:48639/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--557f1a91-7e4a-d5fd-2cd5-00007830014a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.158.83:45555/i","pattern":"[url:value = 'http://61.52.158.83:45555/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ac30290-d97b-2c72-b3bb-0000393e0cfc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.194.179.106:52016/i","pattern":"[url:value = 'http://115.194.179.106:52016/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--475a98da-8f7c-f01e-4ac8-0000464e4df7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.4.254.241:52598/bin.sh","pattern":"[url:value = 'http://31.4.254.241:52598/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1777cdf5-4b04-1933-235c-0000f74cb91e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://117.26.82.102:41542/i","pattern":"[url:value = 'http://117.26.82.102:41542/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05683afb-ad51-a800-21c0-00002b27ee89","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.137.251.126:60468/bin.sh","pattern":"[url:value = 'http://61.137.251.126:60468/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a86d8555-8267-a65c-9687-0000ebf6d8b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.112.59.91:60395/bin.sh","pattern":"[url:value = 'http://125.112.59.91:60395/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--166d6296-69be-bf79-da58-00006920953a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.137.251.126:60468/i","pattern":"[url:value = 'http://61.137.251.126:60468/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--063f5e7f-8490-b66a-041f-000039853722","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://68.168.20.218:18081/f8YlUiZDcEOZ","pattern":"[url:value = 'http://68.168.20.218:18081/f8YlUiZDcEOZ']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bb7bd1b-0ecf-5f91-bbc0-0000e06bffce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.64.122:48159/bin.sh","pattern":"[url:value = 'http://115.49.64.122:48159/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--242db813-f351-16f9-7ba5-000083d52066","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.112.59.91:60395/i","pattern":"[url:value = 'http://125.112.59.91:60395/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43f03eda-f9ac-84fd-d0d8-000088101c6a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.64.122:48159/i","pattern":"[url:value = 'http://115.49.64.122:48159/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--138a9e34-fc3b-b5f5-051b-000035bbc55b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.221.25.94:37532/bin.sh","pattern":"[url:value = 'http://113.221.25.94:37532/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8617ae2f-7861-db26-a889-000074305055","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_47648acbd9943ebf.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_47648acbd9943ebf.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a60afb36-e9c8-84fe-8ed2-0000c30d0d42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://124.131.166.85:34514/bin.sh","pattern":"[url:value = 'http://124.131.166.85:34514/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed4c5035-19a0-7e64-eb35-0000130732d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://124.131.166.85:34514/i","pattern":"[url:value = 'http://124.131.166.85:34514/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1a58de8-1000-eefd-cfb7-00007b167566","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://58.208.16.203:3588/i","pattern":"[url:value = 'http://58.208.16.203:3588/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b36cd8ed-f5fd-a02e-bb47-000058a9648a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://58.208.16.203:3588/bin.sh","pattern":"[url:value = 'http://58.208.16.203:3588/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ebbc599-b6d7-9a62-d16e-0000ec8a8fa0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.173.60.37:49335/i","pattern":"[url:value = 'http://175.173.60.37:49335/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d717cb8e-a83d-9a63-df18-0000b400f8b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.147.243.79:60816/i","pattern":"[url:value = 'http://175.147.243.79:60816/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c8a6fb4-17d4-9570-f7ad-0000d9290e78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.51.119:37449/i","pattern":"[url:value = 'http://182.116.51.119:37449/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0faedb9-c3b5-75f6-f63d-000088411632","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.51.119:37449/bin.sh","pattern":"[url:value = 'http://182.116.51.119:37449/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3834af59-c7e8-8ae6-495d-00009f30043a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://220.192.234.145:55381/bin.sh","pattern":"[url:value = 'http://220.192.234.145:55381/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1230ac04-dda7-b7eb-3b10-0000d7142e29","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://220.192.234.145:55381/i","pattern":"[url:value = 'http://220.192.234.145:55381/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76de7735-6664-6aa6-2742-0000d7c37241","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.177.103.199:46495/bin.sh","pattern":"[url:value = 'http://42.177.103.199:46495/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b2d0abb-7162-aaa7-c22d-0000824de02b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.177.103.199:46495/i","pattern":"[url:value = 'http://42.177.103.199:46495/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3926464-c8e5-4e7a-7f1f-0000a4387a4a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://threedrows.net/uploads/cl1786993325591.exe","pattern":"[url:value = 'https://threedrows.net/uploads/cl1786993325591.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35de0067-a80b-7e91-d835-0000d88567ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://85.15.117.156:37936/bin.sh","pattern":"[url:value = 'http://85.15.117.156:37936/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3834bc3a-5cdc-4b0b-a9ec-0000b44e30d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.138.117.213:54917/bin.sh","pattern":"[url:value = 'http://222.138.117.213:54917/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f3c5946-52d4-ab61-ebf1-0000c4772e29","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.138.117.213:54917/i","pattern":"[url:value = 'http://222.138.117.213:54917/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--174f0547-5a3c-b3a0-7f02-00001ab776b8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://85.15.117.156:37936/i","pattern":"[url:value = 'http://85.15.117.156:37936/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--318bb507-638b-0cab-0b44-000012e1534f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.8.162.45:59164/bin.sh","pattern":"[url:value = 'http://123.8.162.45:59164/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69134f98-458d-f1cc-4317-0000f429be9b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.150.177.126:57685/i","pattern":"[url:value = 'http://175.150.177.126:57685/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7457757-47af-be30-d17a-0000fb4d2752","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://mon-blanc-04.cfd/installer.exe","pattern":"[url:value = 'https://mon-blanc-04.cfd/installer.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4783db32-c189-a885-b990-0000c5e4ba59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.158.197.238:53233/bin.sh","pattern":"[url:value = 'http://105.158.197.238:53233/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce7482c5-c02c-661c-721a-00003dcf5e27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.248.60.89:60712/i","pattern":"[url:value = 'http://112.248.60.89:60712/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e401b04-f9cf-be22-8f24-00002c956726","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/7154708060/EcHFKBJ.exe","pattern":"[url:value = 'http://62.60.226.140/files/7154708060/EcHFKBJ.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--223ea20e-6037-8848-7e3a-0000a3b8ab46","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.158.197.238:53233/i","pattern":"[url:value = 'http://105.158.197.238:53233/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5829898-12cf-8870-93ab-0000bd584e3d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.8.30.116:41163/bin.sh","pattern":"[url:value = 'http://123.8.30.116:41163/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e629510-3299-f83b-b581-000047da98bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://179.108.90.55:37440/bin.sh","pattern":"[url:value = 'http://179.108.90.55:37440/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70ccc8b3-fe97-99bd-eb4a-0000a29fd64a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.8.30.116:41163/i","pattern":"[url:value = 'http://123.8.30.116:41163/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1df21c5-6121-71d8-3974-0000f9e1cb72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/6680549914/ENKpzg6.exe","pattern":"[url:value = 'http://62.60.226.140/files/6680549914/ENKpzg6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afd87431-21a4-b299-f3d0-000012842cb2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.120.163.131:49762/i","pattern":"[url:value = 'http://182.120.163.131:49762/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f767f3d-f29c-ad3e-e2c9-0000c9048232","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://179.108.90.55:37440/i","pattern":"[url:value = 'http://179.108.90.55:37440/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d35f1270-d9d8-a8e3-d299-000023a7119b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.231.127.198:37040/i","pattern":"[url:value = 'http://113.231.127.198:37040/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fddc8f5c-52c4-8e25-ea15-0000a2ae88fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.214.165:40665/i","pattern":"[url:value = 'http://221.15.214.165:40665/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bfc913b-0853-99ba-82a3-000000194ac8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.183.167:47451/i","pattern":"[url:value = 'http://42.235.183.167:47451/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab2fc298-afb0-80cf-76e8-0000556b24d8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.132.158.53:41696/bin.sh","pattern":"[url:value = 'http://123.132.158.53:41696/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efaa86af-ce9a-ea4d-d0ef-00007d882a27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.20.77:59128/bin.sh","pattern":"[url:value = 'http://182.116.20.77:59128/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c785932c-4d7f-54f0-9d40-0000029f549b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://114.228.132.133:38637/i","pattern":"[url:value = 'http://114.228.132.133:38637/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e32526d2-f84f-210f-72e0-0000f2a1f370","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.132.158.53:41696/i","pattern":"[url:value = 'http://123.132.158.53:41696/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94d335f7-6c6f-085d-1727-0000f91661b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.138.108.78:35117/bin.sh","pattern":"[url:value = 'http://116.138.108.78:35117/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91754006-e1a9-a77e-7f5d-000020edf33b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.225.15.213:35530/i","pattern":"[url:value = 'http://42.225.15.213:35530/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dbc0749-cd22-7b69-dd3a-000006ab9adc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.227.126:60165/i","pattern":"[url:value = 'http://182.119.227.126:60165/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d8d8f92-7d2c-80de-27b1-000025f352a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.20.77:59128/i","pattern":"[url:value = 'http://182.116.20.77:59128/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4edd1a1-b58a-902d-810c-00006a541896","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.138.108.78:35117/i","pattern":"[url:value = 'http://116.138.108.78:35117/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc2f9a63-b7a4-b513-7bec-00009e986fa2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.128.38:41331/bin.sh","pattern":"[url:value = 'http://115.54.128.38:41331/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8593c6e-6e06-3504-1783-0000d77b33e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.7.223.208:48157/bin.sh","pattern":"[url:value = 'http://123.7.223.208:48157/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e2e4b2c-42af-34c4-6f2d-00000a7a6175","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.7.223.208:48157/i","pattern":"[url:value = 'http://123.7.223.208:48157/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da4457a0-f05d-8822-7522-0000a945560e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.128.38:41331/i","pattern":"[url:value = 'http://115.54.128.38:41331/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--096c1797-e291-c41b-4bae-00004dad4237","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://163.142.94.45:36545/bin.sh","pattern":"[url:value = 'http://163.142.94.45:36545/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c44446c-fcce-09e8-6f49-0000501f782e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.49.210.219:38645/bin.sh","pattern":"[url:value = 'http://115.49.210.219:38645/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5efbd282-0d7a-624e-c2ce-00008fa60617","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.49.210.219:38645/i","pattern":"[url:value = 'http://115.49.210.219:38645/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02502118-2426-dd3a-acaf-000001b7f373","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.4.17.29:54916/i","pattern":"[url:value = 'http://42.4.17.29:54916/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81237645-afba-e7dd-56eb-00005925a506","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.136.52.188:32973/i","pattern":"[url:value = 'http://222.136.52.188:32973/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0eaa7e07-79fa-b610-289e-000076864dab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.i586","pattern":"[url:value = 'http://222.223.152.97:800/m.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d08b965-7892-38a8-e29e-000081b6d12b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.powerpc","pattern":"[url:value = 'http://222.223.152.97:800/m.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f681430-819b-04e6-653c-0000bdda9e0e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.i486","pattern":"[url:value = 'http://222.223.152.97:800/m.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fef41ecb-ba59-41a0-7835-0000071d352b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.armv6l","pattern":"[url:value = 'http://222.223.152.97:800/m.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7ef2f8a-18b2-0621-59b1-00003a7d1c9b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.armv7l","pattern":"[url:value = 'http://222.223.152.97:800/m.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccc27c49-00b1-fbfa-f2fa-00007ddd664b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.armv4l","pattern":"[url:value = 'http://222.223.152.97:800/m.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--864e217a-f65b-c0d1-406f-0000b0ebd1da","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.x86_64","pattern":"[url:value = 'http://222.223.152.97:800/m.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cecc05e-f1fa-4659-624c-0000f0123f05","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.i686","pattern":"[url:value = 'http://222.223.152.97:800/m.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da784e96-1c11-a414-f60b-00003dcc1ab3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.mips","pattern":"[url:value = 'http://222.223.152.97:800/m.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2254f50-3c2f-44c5-a062-0000a42fec71","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/lilin.sh","pattern":"[url:value = 'http://222.223.152.97:800/lilin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5d94d08-1137-b84f-a693-000040bd4ffb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.armv5l","pattern":"[url:value = 'http://222.223.152.97:800/m.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab283b1d-4c13-078e-0834-0000e98f32e4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.mipsel","pattern":"[url:value = 'http://222.223.152.97:800/m.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--970517c5-e304-bdd1-bf2d-000016fb618b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/wget.sh","pattern":"[url:value = 'http://222.223.152.97:800/wget.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2e34f6c-b1fb-ffae-66da-0000fb599730","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.199.146:39260/i","pattern":"[url:value = 'http://182.114.199.146:39260/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3a704de-e30f-3cc9-7f3a-00005fbfae08","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.119.205.237:56896/bin.sh","pattern":"[url:value = 'http://182.119.205.237:56896/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8f40afb-0f42-8a3c-368d-00000dd807d8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.46.213.70:33401/bin.sh","pattern":"[url:value = 'http://125.46.213.70:33401/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d515a2d-710a-e0c3-b392-000098db44ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.119.205.237:56896/i","pattern":"[url:value = 'http://182.119.205.237:56896/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--636dede4-1ad7-ff1b-973e-0000824eadf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://163.142.93.152:51284/i","pattern":"[url:value = 'http://163.142.93.152:51284/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ffbb0c1-d8b3-8c58-a476-0000aab13c6a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.189.148.227:50140/bin.sh","pattern":"[url:value = 'http://123.189.148.227:50140/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0152cd6c-29fc-9445-eae6-00004e8aee30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.172.221.97:35084/bin.sh","pattern":"[url:value = 'http://103.172.221.97:35084/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--700ae5ff-ad45-d176-42d8-000089329f84","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.189.148.227:50140/i","pattern":"[url:value = 'http://123.189.148.227:50140/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88e5cd5c-e1fc-43db-7ee8-00003fe42d06","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.54.190.223:33351/i","pattern":"[url:value = 'http://61.54.190.223:33351/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5cc92c3-9b56-b26f-5a9d-0000b63a0b71","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.172.221.97:35084/i","pattern":"[url:value = 'http://103.172.221.97:35084/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--588d5f93-fd50-905d-d4b2-0000a509fd59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.231.89.132:55455/bin.sh","pattern":"[url:value = 'http://42.231.89.132:55455/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0172a2bb-e113-fd20-2b93-00001f479a25","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.231.89.132:55455/i","pattern":"[url:value = 'http://42.231.89.132:55455/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d1c671a-ded7-38a5-a687-0000db7ac2ba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.44.145.231:40959/i","pattern":"[url:value = 'http://27.44.145.231:40959/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d607a526-d341-d809-4637-000085a2a225","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://124.235.239.18:59915/i","pattern":"[url:value = 'http://124.235.239.18:59915/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--929f7570-77bd-4898-9830-0000927f2e0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.58.177.63:33235/bin.sh","pattern":"[url:value = 'http://115.58.177.63:33235/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af065966-5a46-8b21-4ca5-00003a36b1bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.163.128.185:59951/i","pattern":"[url:value = 'http://61.163.128.185:59951/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1875cfe6-ced4-9303-c62f-00003514a796","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.96.22:48919/bin.sh","pattern":"[url:value = 'http://123.14.96.22:48919/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--def9848d-3f9c-08fe-ae58-00008615da54","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.96.22:48919/i","pattern":"[url:value = 'http://123.14.96.22:48919/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e03e89ef-2fa8-71ce-f70a-00007de8ec7a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.227.36.172:37655/i","pattern":"[url:value = 'http://42.227.36.172:37655/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b5212dd-766c-0080-d599-00008cb6a3ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.221.25.59:57666/bin.sh","pattern":"[url:value = 'http://113.221.25.59:57666/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9bcc0df-0ca5-77a1-8e97-00007b8e1f83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://183.188.77.45:12907/i","pattern":"[url:value = 'http://183.188.77.45:12907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e8ba468-d3ef-8136-101b-000002b3fc5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.80:889/.bash_history","pattern":"[url:value = 'http://150.241.65.80:889/.bash_history']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d2a6193-85c7-bb38-ec14-0000ac7ed0ba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://faceit-anti-cheat.com/notify.ps1","pattern":"[url:value = 'http://faceit-anti-cheat.com/notify.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ac279d0-94be-dadf-8114-0000f26811a7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.221.25.59:57666/i","pattern":"[url:value = 'http://113.221.25.59:57666/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b092ea7-d285-0694-b6fc-00005a9abfb8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://soft-update.dev/get_verify?i=66695","pattern":"[url:value = 'https://soft-update.dev/get_verify?i=66695']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce6d1da3-0876-6129-aeda-0000e327d7a0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://drastok.xyz/installer/Drastok.application","pattern":"[url:value = 'https://drastok.xyz/installer/Drastok.application']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3442905-c1ec-5b22-1511-0000c74a9dc4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://auth2api.site/API_REFRESH.scpt","pattern":"[url:value = 'https://auth2api.site/API_REFRESH.scpt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e44a594c-4059-0ae0-74ef-000070867f7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://86.54.25.213/d/unix49211821","pattern":"[url:value = 'http://86.54.25.213/d/unix49211821']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4d7f22b-ff54-1e1f-fb9f-0000fe532823","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://drastok.xyz/installer/Application%20Files/Drastok_1_0_0_223/Drastok.dll.deploy","pattern":"[url:value = 'https://drastok.xyz/installer/Application%20Files/Drastok_1_0_0_223/Drastok.dll.deploy']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfeda948-ef05-3f9a-909e-00002b81000c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.80:889/gg11","pattern":"[url:value = 'http://150.241.65.80:889/gg11']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81a8d82a-8549-6c95-c83b-00005040e2d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://cloudenterprise26.com/ZxC9vBnM7lKjH3gF","pattern":"[url:value = 'https://cloudenterprise26.com/ZxC9vBnM7lKjH3gF']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ff8b0a3-56ce-a70d-ae6b-000078eb720e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/67eefd","pattern":"[url:value = 'http://5.182.210.174/67eefd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32127dfb-e7f6-6dde-2baa-000024cfaf5e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d9d6f9","pattern":"[url:value = 'http://5.182.210.174/d9d6f9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ddbe3b1-1317-4aa7-025a-000054b87af7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_43c5f47d5fbe115a.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_43c5f47d5fbe115a.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20302a69-ab2c-33d6-3fba-0000fac249a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/2b85c0","pattern":"[url:value = 'http://5.182.210.174/2b85c0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bba776bd-7f56-d2e4-80e0-00000827c06d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/2c07b9","pattern":"[url:value = 'http://5.182.210.174/2c07b9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0856071-59dc-4534-f8c7-0000596a5b71","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d95abb","pattern":"[url:value = 'http://5.182.210.174/d95abb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59617dd3-a48b-8d39-6fe8-0000db9d98eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/334215","pattern":"[url:value = 'http://5.182.210.174/334215']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86db2a11-05fd-b7c7-7da0-000097f84b1b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7c899f","pattern":"[url:value = 'http://5.182.210.174/7c899f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13e2f716-959b-3c5d-c736-0000f9246e51","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/5adf18","pattern":"[url:value = 'http://5.182.210.174/5adf18']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9209980-77d0-3d8e-011b-00008eae4f4c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f6f76d","pattern":"[url:value = 'http://5.182.210.174/f6f76d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--689836ba-9f60-5f48-baf1-00004b77b403","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/da8d2e","pattern":"[url:value = 'http://5.182.210.174/da8d2e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dff844d2-aa06-1424-a046-00005d085400","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9922af","pattern":"[url:value = 'http://5.182.210.174/9922af']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29d0aa27-4c3d-5de3-e140-00001b4f9355","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/http","pattern":"[url:value = 'http://5.182.210.174/http']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--669e796f-1c23-ced2-a996-00005eb7b529","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9c9b83","pattern":"[url:value = 'http://5.182.210.174/9c9b83']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2db887a-8f76-3de5-e51e-00004f4bb1f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227:8080/bot.x86_64","pattern":"[url:value = 'http://94.154.43.227:8080/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dadf802-4c36-2e6f-6d77-000083f0257d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://77.239.124.108/atomic/main_x86_64","pattern":"[url:value = 'http://77.239.124.108/atomic/main_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83ab05cc-8d4a-edaf-394e-000050b0a42c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pawsockenjoyer.site/z7/webhook","pattern":"[url:value = 'https://pawsockenjoyer.site/z7/webhook']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7353fbef-ab91-a582-1c27-000053e2ea78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://gaiadeqi.com/vlc3.zip","pattern":"[url:value = 'https://gaiadeqi.com/vlc3.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0a26f36-5aa0-981e-1957-00000e2d69f0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.122.199.106:34085/bin.sh","pattern":"[url:value = 'http://182.122.199.106:34085/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84675f50-42cd-5ac3-431f-0000763fdefa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.75.183:52478/bin.sh","pattern":"[url:value = 'http://125.41.75.183:52478/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1e652f9-f338-408a-aba6-00008f87758b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.146.190:54106/i","pattern":"[url:value = 'http://115.48.146.190:54106/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adcccfa2-5552-4c7d-2d42-0000f03a8917","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.45.140:49405/bin.sh","pattern":"[url:value = 'http://61.52.45.140:49405/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6f0701a-e248-9c00-fd22-00007745e854","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.122.199.106:34085/i","pattern":"[url:value = 'http://182.122.199.106:34085/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff7c7a30-1b75-0793-371b-00005c7e0caa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.130.187:46359/i","pattern":"[url:value = 'http://115.55.130.187:46359/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb4d5538-1aa8-261e-e1fe-000011af6501","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.75.183:52478/i","pattern":"[url:value = 'http://125.41.75.183:52478/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1bbba2a-8548-87f7-883b-00008335aa7f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.87.135:56962/bin.sh","pattern":"[url:value = 'http://125.47.87.135:56962/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--513ac95f-bbe6-593c-8d74-00004fa299c7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.45.140:49405/i","pattern":"[url:value = 'http://61.52.45.140:49405/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b460b97f-52f1-2be5-6935-0000d36e1ede","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.74.145.166:55070/i","pattern":"[url:value = 'http://39.74.145.166:55070/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f326b9b-1831-5d10-4ca1-00004beef13c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.202.245.161:52186/i","pattern":"[url:value = 'http://27.202.245.161:52186/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e75eb78f-90db-9fdf-7f59-000039485d78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.105.170:51134/i","pattern":"[url:value = 'http://196.190.105.170:51134/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83c4db08-c2a1-9338-3389-000004a00ee8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.87.135:56962/i","pattern":"[url:value = 'http://125.47.87.135:56962/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3011443d-f50b-fe93-c10b-0000266099ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.18.84.125:39736/bin.sh","pattern":"[url:value = 'http://60.18.84.125:39736/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--205939c0-e4d7-6d18-6035-000079eab724","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.163.131.68:44551/i","pattern":"[url:value = 'http://61.163.131.68:44551/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d67ed39d-3534-0f5b-d2f7-00001c15a43c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_a34690cc683b0c1a.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_a34690cc683b0c1a.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5802330c-3b2b-9b41-0cb4-0000e709b88e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4ce19bfafe018ff9.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4ce19bfafe018ff9.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--050e3f11-e468-f377-433a-000056f48bd7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_91273358c1525030.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_91273358c1525030.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2999be22-1e18-6a72-a6fd-00003c2a7fdf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.127.53.189:47969/bin.sh","pattern":"[url:value = 'http://222.127.53.189:47969/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--422bfd00-9cd7-8bfc-5398-0000f9d8235c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://threedrows.net/uploads/cl1787387436870.exe","pattern":"[url:value = 'https://threedrows.net/uploads/cl1787387436870.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dafed242-d395-e70e-6e0b-00006e63645c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.173.75.158:39827/i","pattern":"[url:value = 'http://123.173.75.158:39827/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9709d526-cc50-68f2-1879-00004d25f695","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.147.215:41949/bin.sh","pattern":"[url:value = 'http://222.137.147.215:41949/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4241acdf-91fb-44d7-e478-000071cab502","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.127.53.189:47969/i","pattern":"[url:value = 'http://222.127.53.189:47969/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4e8a150-df52-8939-d350-000081078c28","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://practisingcertificateprotection.com/Installer_91473f.msi","pattern":"[url:value = 'https://practisingcertificateprotection.com/Installer_91473f.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73c96ca5-4ff6-6dc0-42c3-0000003584e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://kee126.com/vlcc.zip","pattern":"[url:value = 'https://kee126.com/vlcc.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46b90eb3-f8da-e85e-3464-00001f502307","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_21aeb275da3bb00b.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_21aeb275da3bb00b.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--827302ec-8594-25bf-1d49-0000afb42eec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.183.90:33830/i","pattern":"[url:value = 'http://123.14.183.90:33830/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09f5319f-c142-9c7e-7228-000009b3bb4b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/20fbae","pattern":"[url:value = 'http://5.182.210.174/20fbae']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78efa237-282e-9dfe-363f-000079d69741","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/374166","pattern":"[url:value = 'http://5.182.210.174/374166']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc9094d3-9181-af7e-d638-00009e9b1221","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9f0d8c","pattern":"[url:value = 'http://5.182.210.174/9f0d8c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7658d761-3cc8-acd6-524e-000016aa6ed1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.157.21:42304/bin.sh","pattern":"[url:value = 'http://115.50.157.21:42304/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88726f60-9235-4f62-15fd-0000e0cfe97e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c4878f","pattern":"[url:value = 'http://5.182.210.174/c4878f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ec1070b-7537-75d8-2b1e-00005b01ce30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1416b6","pattern":"[url:value = 'http://5.182.210.174/1416b6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db5cc07b-e8a9-45e0-5c5a-000005f50855","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/da703f","pattern":"[url:value = 'http://5.182.210.174/da703f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--281153c5-0c8e-d001-6376-000098343f48","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/45d4ef","pattern":"[url:value = 'http://5.182.210.174/45d4ef']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d68a1fe-c3ba-17a2-d09f-0000bf597fdb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/79d8a6","pattern":"[url:value = 'http://5.182.210.174/79d8a6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e669c6c-daba-70c1-cd79-0000cc9e760f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1f4418","pattern":"[url:value = 'http://5.182.210.174/1f4418']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4480d5e-5617-667f-1ca6-00005ffdf15f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9bf687","pattern":"[url:value = 'http://5.182.210.174/9bf687']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29e5b40b-839e-8c00-dc15-0000a8ead72d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/40ab6b","pattern":"[url:value = 'http://5.182.210.174/40ab6b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6079f87-d178-7d82-0524-000078b14b6b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f653ed","pattern":"[url:value = 'http://5.182.210.174/f653ed']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e3ad684-3754-41de-e2c5-000003244dc7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/69e5eb","pattern":"[url:value = 'http://5.182.210.174/69e5eb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94065ad8-b000-0389-a1fc-0000dedb3159","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/75fa66","pattern":"[url:value = 'http://5.182.210.174/75fa66']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c4adcdb-6735-aa32-e7e1-0000ce2ebd9e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/3d5609","pattern":"[url:value = 'http://5.182.210.174/3d5609']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41d519c0-bb8f-965f-75c4-000008605cec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/abcfc3","pattern":"[url:value = 'http://5.182.210.174/abcfc3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e720570-6436-9861-c216-000063fbc925","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b69b69","pattern":"[url:value = 'http://5.182.210.174/b69b69']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a901cd2-72e4-33cc-ffb5-00006c036a63","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7252a4","pattern":"[url:value = 'http://5.182.210.174/7252a4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ee7f8a9-6d32-c6dd-57fc-0000c0d43f21","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/805ade","pattern":"[url:value = 'http://5.182.210.174/805ade']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a772c84-d476-495f-fceb-0000e51a7949","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f3158a","pattern":"[url:value = 'http://5.182.210.174/f3158a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a386f47-369c-9b0a-1403-00004bc41157","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/20c791","pattern":"[url:value = 'http://5.182.210.174/20c791']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca6f09e0-6e74-8b3b-4eff-0000515b5244","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/67dfb1","pattern":"[url:value = 'http://5.182.210.174/67dfb1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68204b06-3b8e-d510-5b50-0000d8188f72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/140cef","pattern":"[url:value = 'http://5.182.210.174/140cef']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a44da711-0685-cb1b-d791-000000b99b4e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/810904","pattern":"[url:value = 'http://5.182.210.174/810904']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec421a1e-38e0-a609-eb7d-0000ca31115f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e8090c","pattern":"[url:value = 'http://5.182.210.174/e8090c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11e6befb-5b10-ecfc-4cbc-00007ec81df5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/06d0d9","pattern":"[url:value = 'http://5.182.210.174/06d0d9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc68e169-a1d4-5671-77ae-0000b77c9e3a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a84a56","pattern":"[url:value = 'http://5.182.210.174/a84a56']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6576fa6-bef6-320d-eeab-00003ee9d785","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/766551","pattern":"[url:value = 'http://5.182.210.174/766551']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35f954a7-8b89-0b2c-49a7-000032f7dc96","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/bd742d","pattern":"[url:value = 'http://5.182.210.174/bd742d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d96ec1cf-c33d-2b8d-eca1-0000166e3e5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ceeba2","pattern":"[url:value = 'http://5.182.210.174/ceeba2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebdb87a9-8c54-7f00-2c6a-0000471c267a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/233bc5","pattern":"[url:value = 'http://5.182.210.174/233bc5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61e13b3f-ba4e-3d38-4d2f-000030fedab4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9ab2df","pattern":"[url:value = 'http://5.182.210.174/9ab2df']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d89eb3c-2dd3-581a-0d09-0000f0e948a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/5d1d11","pattern":"[url:value = 'http://5.182.210.174/5d1d11']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5927f67-912b-85ec-a5f4-00000f480fef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/2509eb","pattern":"[url:value = 'http://5.182.210.174/2509eb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--326f0910-9251-e991-8b4b-0000e49f216c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c5d83d","pattern":"[url:value = 'http://5.182.210.174/c5d83d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0951997-6cce-848e-7e48-0000174f25c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/07809e","pattern":"[url:value = 'http://5.182.210.174/07809e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59a3ada9-1759-cab4-5815-000076a913ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6da58f","pattern":"[url:value = 'http://5.182.210.174/6da58f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ca60e55-e698-3be1-061a-00003f37823a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/564fd4","pattern":"[url:value = 'http://5.182.210.174/564fd4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9ec58ec-dfb2-210b-bdc6-00008f5015ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/592521","pattern":"[url:value = 'http://5.182.210.174/592521']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87b118e6-fde6-3c68-3b39-00006764f278","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/57965a","pattern":"[url:value = 'http://5.182.210.174/57965a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--835749db-931b-6a91-6baa-0000a11eafe7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/41308f","pattern":"[url:value = 'http://5.182.210.174/41308f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acdc1fb6-f59e-cd3a-c99a-0000779a57c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7cf768","pattern":"[url:value = 'http://5.182.210.174/7cf768']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44212633-e5ae-793f-0d37-00005dec8d59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b2904e","pattern":"[url:value = 'http://5.182.210.174/b2904e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c456ee45-8e0a-6423-f70e-0000c0d220e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ea8c29","pattern":"[url:value = 'http://5.182.210.174/ea8c29']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24d28234-6314-6668-9173-0000b67c41f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/21dbf2","pattern":"[url:value = 'http://5.182.210.174/21dbf2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7000507f-2c31-6b56-03ae-0000116037e7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/5bf116","pattern":"[url:value = 'http://5.182.210.174/5bf116']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e37b85f-e715-9d3a-e478-00000737ade2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/135481","pattern":"[url:value = 'http://5.182.210.174/135481']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b13baf4d-ecce-5737-82ac-000014a0128e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9cd6a1","pattern":"[url:value = 'http://5.182.210.174/9cd6a1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2f9836d-ef31-32f8-a49c-000060b69c0f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b8efbc","pattern":"[url:value = 'http://5.182.210.174/b8efbc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--367a904d-fb15-0524-3608-00004da54933","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a1a0da","pattern":"[url:value = 'http://5.182.210.174/a1a0da']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08a96db6-ad8a-f1bc-fe1b-00004afcc9a2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/25a617","pattern":"[url:value = 'http://5.182.210.174/25a617']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13adc1d5-b877-a5ed-6834-000005b28b3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6c8dfb","pattern":"[url:value = 'http://5.182.210.174/6c8dfb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec8250f9-c8e9-eb49-0d86-0000f76eb245","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/0ab716","pattern":"[url:value = 'http://5.182.210.174/0ab716']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39687462-5544-00a7-28cf-0000b71f0f41","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/2be985","pattern":"[url:value = 'http://5.182.210.174/2be985']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1d0015f-ccfe-0e4f-1d66-00000c5ecf57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/84d632","pattern":"[url:value = 'http://5.182.210.174/84d632']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b23c5c3-2d42-077a-0f59-000073753f45","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b4fcda","pattern":"[url:value = 'http://5.182.210.174/b4fcda']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4564aa0c-e5e8-befc-2f03-0000e35b4dad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b02922","pattern":"[url:value = 'http://5.182.210.174/b02922']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ab1a288-641c-97d3-0c8a-00003b0752fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f76130","pattern":"[url:value = 'http://5.182.210.174/f76130']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--622812b4-b79f-aab7-b525-00007b60cb29","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/4f3e29","pattern":"[url:value = 'http://5.182.210.174/4f3e29']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adca97b3-7ae1-ba43-2978-000076df3239","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b67bf0","pattern":"[url:value = 'http://5.182.210.174/b67bf0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0c6c5e6-fa3c-2619-ba23-00009d93ade2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/72ab73","pattern":"[url:value = 'http://5.182.210.174/72ab73']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e89c3af4-fe7c-e5f0-9fda-00009aab9f5c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/662744","pattern":"[url:value = 'http://5.182.210.174/662744']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--797719c1-51c0-dd33-d91a-0000317af427","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f17409","pattern":"[url:value = 'http://5.182.210.174/f17409']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00e5eb0c-66dc-e03c-4f39-00009086801a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/21eb07","pattern":"[url:value = 'http://5.182.210.174/21eb07']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--defb9db1-e2a7-ec29-f22a-0000de6a0e94","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a10960","pattern":"[url:value = 'http://5.182.210.174/a10960']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfa64b86-63d0-f8ec-e8dc-00003df6b230","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/dd08c4","pattern":"[url:value = 'http://5.182.210.174/dd08c4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f66b624-091f-1844-0df3-0000dd7c66be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/520230","pattern":"[url:value = 'http://5.182.210.174/520230']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a95298b3-42de-d31e-b638-00000f933584","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/bf4fde","pattern":"[url:value = 'http://5.182.210.174/bf4fde']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--121d0c30-7150-e248-3f59-00001fae83f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d70921","pattern":"[url:value = 'http://5.182.210.174/d70921']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf1c05c3-236c-41eb-167c-00000ee9c502","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f9e3f4","pattern":"[url:value = 'http://5.182.210.174/f9e3f4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb0a5f00-264f-56f7-4fcc-00002980ed90","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d67e2e","pattern":"[url:value = 'http://5.182.210.174/d67e2e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acc2112b-40f7-cf93-d681-0000e6dd6c8f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e41ded","pattern":"[url:value = 'http://5.182.210.174/e41ded']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62f83bb8-26a3-04c7-c551-0000b0ef7f72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.59.30.63:56439/b/kal64","pattern":"[url:value = 'http://194.59.30.63:56439/b/kal64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2d60a54-c09e-167f-8545-00000a9c5c1b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.59.30.63:56439/b/linux","pattern":"[url:value = 'http://194.59.30.63:56439/b/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73e6c556-926e-fdf9-baab-000063a37399","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.59.30.63:56439/b/kswpad","pattern":"[url:value = 'http://194.59.30.63:56439/b/kswpad']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c8dcd19-1649-2a8b-7272-00000adc8ba3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.59.30.63:56439/b/amd64","pattern":"[url:value = 'http://194.59.30.63:56439/b/amd64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--600f9d92-bea2-1675-ae27-00005eb1c096","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.239.116.131:52454/bin.sh","pattern":"[url:value = 'http://113.239.116.131:52454/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4887b716-41f6-53df-645c-00003485b4d8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.248.189.106:45073/i","pattern":"[url:value = 'http://112.248.189.106:45073/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d031a72-3a7c-dd78-4ff3-00008a2752cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.101.187.14:53741/i","pattern":"[url:value = 'http://203.101.187.14:53741/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--873fa158-e327-3daf-f867-000097a39ab4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.177.182.116:42583/bin.sh","pattern":"[url:value = 'http://42.177.182.116:42583/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a89e5662-bab6-08ae-43c0-000044731ed9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://193.163.187.73:41788/bin.sh","pattern":"[url:value = 'http://193.163.187.73:41788/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db1c3dfe-b9d1-ca90-eee9-000035c50f5e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.228.221.46:33013/bin.sh","pattern":"[url:value = 'http://42.228.221.46:33013/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59009cb7-484f-f2bb-13da-0000e9936874","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://193.163.187.73:41788/i","pattern":"[url:value = 'http://193.163.187.73:41788/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dd2b8cc-05e7-108d-d9c3-00002802bd5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.239.64.220:36469/bin.sh","pattern":"[url:value = 'http://113.239.64.220:36469/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0449540a-581f-0687-3429-00002836a118","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.163.131.68:44551/bin.sh","pattern":"[url:value = 'http://61.163.131.68:44551/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e67d7846-d902-9b3f-7631-000049334a45","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.5.254.164:39916/i","pattern":"[url:value = 'http://42.5.254.164:39916/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a310a211-2f0f-9104-0b90-000068144245","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://43.245.39.127:54225/i","pattern":"[url:value = 'http://43.245.39.127:54225/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--defbd05f-bbbe-0683-10f2-000038c1c276","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.107.210.253:44599/i","pattern":"[url:value = 'http://175.107.210.253:44599/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36b133e6-6cef-2966-4efb-000011140fa0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.108.82.26:33999/i","pattern":"[url:value = 'http://223.108.82.26:33999/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e1c5a05-7685-7711-65ce-0000a6e86e4a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.108.82.26:33999/bin.sh","pattern":"[url:value = 'http://223.108.82.26:33999/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--206caeb4-e1af-a5ed-5371-000042a1af56","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.79.131:52303/bin.sh","pattern":"[url:value = 'http://42.231.79.131:52303/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19ed1af2-d37f-2180-d0bc-00002ca08617","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.202.245.161:52186/bin.sh","pattern":"[url:value = 'http://27.202.245.161:52186/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--428ec8d4-d069-3bca-200b-000077d52b61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.101.187.14:53741/bin.sh","pattern":"[url:value = 'http://203.101.187.14:53741/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf36bcaa-bd61-6037-2536-0000a753e98a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.7.217.91:35797/i","pattern":"[url:value = 'http://42.7.217.91:35797/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52980d96-1c0c-e739-9619-00004692e485","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.105.170:51134/bin.sh","pattern":"[url:value = 'http://196.190.105.170:51134/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53293a6d-1c62-3691-970f-0000d3625b9b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://45.194.25.221:57073/i","pattern":"[url:value = 'http://45.194.25.221:57073/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abae2a79-6c94-1461-e667-0000f153541d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.35.84:54017/i","pattern":"[url:value = 'http://182.113.35.84:54017/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--590591e9-242c-103a-0465-00004a75e10c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.228.221.46:33013/i","pattern":"[url:value = 'http://42.228.221.46:33013/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f382e49e-ff78-5aa1-57af-00003a5f0443","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://181.79.85.69:11861/i","pattern":"[url:value = 'http://181.79.85.69:11861/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80afcfc1-f09d-27f4-93d3-00006e10cca1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.151.83.137:53442/i","pattern":"[url:value = 'http://175.151.83.137:53442/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0c54898-99e1-496b-1c1e-0000d4d85f14","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.73.193:41053/i","pattern":"[url:value = 'http://222.142.73.193:41053/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--856a874a-c7f4-d4a9-404a-000050decbf7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.151.83.137:53442/bin.sh","pattern":"[url:value = 'http://175.151.83.137:53442/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75dea581-26bd-cfcf-600c-0000a69a8313","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.73.193:41053/bin.sh","pattern":"[url:value = 'http://222.142.73.193:41053/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ddeede8-bf69-c18e-2703-0000d93cb6f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.82.47:47055/i","pattern":"[url:value = 'http://123.14.82.47:47055/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--599c963b-a1be-79d3-6868-000002eabd75","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://163.142.92.235:39139/i","pattern":"[url:value = 'http://163.142.92.235:39139/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac2cb1a0-082c-e35f-f7b4-0000e208eb78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://58.255.43.126:35671/i","pattern":"[url:value = 'http://58.255.43.126:35671/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82b7efd8-46cd-74d2-6109-0000fb0fe8a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.113.34.181:57854/i","pattern":"[url:value = 'http://182.113.34.181:57854/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ee3f324-2c5f-f3ba-c1f8-0000cda0aa00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.44.39.164:59869/i","pattern":"[url:value = 'http://125.44.39.164:59869/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7afa8c50-49f6-8733-86bc-00005294a721","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.126.201.118:34655/i","pattern":"[url:value = 'http://182.126.201.118:34655/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37fddcf0-12a0-1cfa-bbdf-0000af3332fb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.246.199:52106/i","pattern":"[url:value = 'http://125.47.246.199:52106/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3450facd-1bd6-e304-c398-0000e839184a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://87.68.238.27:33808/i","pattern":"[url:value = 'http://87.68.238.27:33808/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77160c23-e62c-6da2-6f48-0000961c473d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.151.74.246:42753/bin.sh","pattern":"[url:value = 'http://223.151.74.246:42753/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64800c77-f8db-950c-dc26-0000e4c5f733","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.151.74.246:42753/i","pattern":"[url:value = 'http://223.151.74.246:42753/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c7abe36-0d74-b822-bc13-00001e06c784","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.54.18.142:43500/i","pattern":"[url:value = 'http://42.54.18.142:43500/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a71e8dd-c922-92b3-d736-0000c082dbe9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://119.115.33.201:51030/i","pattern":"[url:value = 'http://119.115.33.201:51030/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe42a165-d9d1-cd25-5a03-000095a4e18f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.162.38.51:34372/bin.sh","pattern":"[url:value = 'http://60.162.38.51:34372/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7db132e-5de2-d5cc-afcd-0000b64b646d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.59.14.119:49412/i","pattern":"[url:value = 'http://125.59.14.119:49412/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5726c75d-e3fc-08c5-f771-0000c6a43c6e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.5.8.190:54830/i","pattern":"[url:value = 'http://42.5.8.190:54830/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95fd3a4b-bbaa-0746-0567-00006e1c77c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.147.215:41949/i","pattern":"[url:value = 'http://222.137.147.215:41949/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--692c3356-2077-4552-dd59-00005af41e16","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.20.178:46432/i","pattern":"[url:value = 'http://125.43.20.178:46432/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66bf6185-e52e-5ea4-1e4d-000034b06858","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://174.105.154.212:55690/i","pattern":"[url:value = 'http://174.105.154.212:55690/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--743cfeda-377a-04f0-ed70-0000d1384588","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://121.239.148.213:46343/i","pattern":"[url:value = 'http://121.239.148.213:46343/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e46baa00-0d39-19ec-a0fb-00007afea9f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.49.24.80:42107/i","pattern":"[url:value = 'http://115.49.24.80:42107/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e91e61a0-65b7-5998-198c-0000abe77fa2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://124.94.144.192:55986/i","pattern":"[url:value = 'http://124.94.144.192:55986/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73d806ea-e5d9-0ac5-9034-00008e51edcb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://223.105.50.190:35667/bin.sh","pattern":"[url:value = 'http://223.105.50.190:35667/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ab0b6c8-d0e8-2157-e6db-00001234386e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://223.105.50.190:35667/i","pattern":"[url:value = 'http://223.105.50.190:35667/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b95e3d89-e969-fc28-a94d-0000fca95155","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://87.68.238.27:33808/bin.sh","pattern":"[url:value = 'http://87.68.238.27:33808/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7900221-f130-642f-441a-00000fc09868","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://47.129.178.214:8092/app_JnCFbH.webp","pattern":"[url:value = 'http://47.129.178.214:8092/app_JnCFbH.webp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8e23de4-dd46-8334-e5a8-00007e71f6c0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/15c864","pattern":"[url:value = 'http://5.182.210.174/15c864']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03e5894a-1aa2-e278-317a-0000b35a784e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/30494a","pattern":"[url:value = 'http://5.182.210.174/30494a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e4fc726-aef4-5ca8-c67e-0000aa6e626a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/14e7a4","pattern":"[url:value = 'http://5.182.210.174/14e7a4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--833965cd-3e2c-7b0f-e88e-00002a8e57d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e70ebc","pattern":"[url:value = 'http://5.182.210.174/e70ebc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4379ee0-f673-b923-120e-00000aeb9731","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/751d98","pattern":"[url:value = 'http://5.182.210.174/751d98']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d62e7201-d16f-6935-5e13-0000346b39f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1cddd2","pattern":"[url:value = 'http://5.182.210.174/1cddd2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a17875d-4ef0-a5d5-91d4-00006703735c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/0d9f5f","pattern":"[url:value = 'http://5.182.210.174/0d9f5f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de197f39-2d0d-bf21-b425-000013005696","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/50b2c0","pattern":"[url:value = 'http://5.182.210.174/50b2c0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f165faa-056d-c7a9-9148-0000e96e699d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/06f787","pattern":"[url:value = 'http://5.182.210.174/06f787']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e11659c-7447-6f51-d2bd-00007245bb14","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e47e49","pattern":"[url:value = 'http://5.182.210.174/e47e49']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c4fce15-560d-51cc-5f9e-00005d8182c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c08b5a","pattern":"[url:value = 'http://5.182.210.174/c08b5a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f65e9bd-e677-c556-ce9f-00008b94f580","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/889136","pattern":"[url:value = 'http://5.182.210.174/889136']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e63c573-7102-5a5a-7bd0-0000c0f78000","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/373541","pattern":"[url:value = 'http://5.182.210.174/373541']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a91b300b-84dc-d3d1-3a85-0000ad0055f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/449188","pattern":"[url:value = 'http://5.182.210.174/449188']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f4a63e3-10c9-4b90-b659-0000870bbba2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/074635","pattern":"[url:value = 'http://5.182.210.174/074635']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b091518-5b00-9c29-f9f4-0000a82ae98d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7fbafd","pattern":"[url:value = 'http://5.182.210.174/7fbafd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d043bb19-ea04-bc7d-daf1-00000f65bad8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f46a9e","pattern":"[url:value = 'http://5.182.210.174/f46a9e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c6270bf-041c-4eb6-a7be-0000b6f7854d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/106fe5","pattern":"[url:value = 'http://5.182.210.174/106fe5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23e1deac-ff94-8b55-e182-0000eca2dbf6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6ccdef","pattern":"[url:value = 'http://5.182.210.174/6ccdef']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b57b2405-0dab-abcd-dcb6-0000c482cee2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/119bdc","pattern":"[url:value = 'http://5.182.210.174/119bdc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b601561c-a1b7-9319-21f4-00007aacd548","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/455b2c","pattern":"[url:value = 'http://5.182.210.174/455b2c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66191923-7135-b403-5810-00003116bca9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9a923d","pattern":"[url:value = 'http://5.182.210.174/9a923d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96e9e068-29e4-0552-c852-0000351a7690","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e489b0","pattern":"[url:value = 'http://5.182.210.174/e489b0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41a557d3-a95c-442b-518f-000028ff5272","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ae2072","pattern":"[url:value = 'http://5.182.210.174/ae2072']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cf63734-858a-4e01-5d94-000013cdffc3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/feb455","pattern":"[url:value = 'http://5.182.210.174/feb455']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--856b027a-a3e3-9b8c-c2de-0000454672ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/452bff","pattern":"[url:value = 'http://5.182.210.174/452bff']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eca73590-f13a-752a-1999-0000e3e6094f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8bea3b","pattern":"[url:value = 'http://5.182.210.174/8bea3b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebc4f70e-0861-0fe9-cab8-0000391c199c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8c04f2","pattern":"[url:value = 'http://5.182.210.174/8c04f2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ac3da84-72ea-4264-cdd8-00006bf04817","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/0dfd70","pattern":"[url:value = 'http://5.182.210.174/0dfd70']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d529406b-1ef9-a882-9deb-0000023fb6d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c915c0","pattern":"[url:value = 'http://5.182.210.174/c915c0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cd3bd5e-5caf-4243-aef2-0000dce51513","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/330a6e","pattern":"[url:value = 'http://5.182.210.174/330a6e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2b1e981-e37d-c151-d680-0000275bff64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/44973f","pattern":"[url:value = 'http://5.182.210.174/44973f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e10b098f-525d-a3b1-b6a7-0000580f7b33","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/bb74f6","pattern":"[url:value = 'http://5.182.210.174/bb74f6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa17e831-c06f-b219-2cd9-0000c4ab36d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/14515c","pattern":"[url:value = 'http://5.182.210.174/14515c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efb2670a-42e0-97c3-b1ad-0000f632ef57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/07c643","pattern":"[url:value = 'http://5.182.210.174/07c643']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90044347-a843-92ee-6094-00005d9a06a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8d34d4","pattern":"[url:value = 'http://5.182.210.174/8d34d4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36f820d6-5ccc-2735-36c2-00005b905296","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://mon-blanc-03.cfd/dollar.exe","pattern":"[url:value = 'https://mon-blanc-03.cfd/dollar.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd8f0e13-9167-5460-06f6-00000992eb05","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://winds11.site/aa/Setup.rar","pattern":"[url:value = 'https://winds11.site/aa/Setup.rar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04ab999a-d9d1-a8df-8f4e-0000e57533bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://bulkdevices.com/blog/Chrome.exe","pattern":"[url:value = 'https://bulkdevices.com/blog/Chrome.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a6f945d-d115-7624-9914-00005832cb90","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.168.179:52810/bin.sh","pattern":"[url:value = 'http://182.127.168.179:52810/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a64bff87-7b29-a12f-f3c1-000062262d67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.171.102:41517/bin.sh","pattern":"[url:value = 'http://123.5.171.102:41517/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58c01e27-f441-a178-9106-00008651e8fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.251.27:57017/i","pattern":"[url:value = 'http://182.113.251.27:57017/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70b95483-6fe6-c484-e91f-00007b6f737f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://221.13.235.11:35751/i","pattern":"[url:value = 'http://221.13.235.11:35751/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eb1e674-1f37-371d-4675-000013cc527c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.171.102:41517/i","pattern":"[url:value = 'http://123.5.171.102:41517/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44da670e-d1a1-761b-0e8c-0000b252ae4a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://8.136.138.165/wp-includes/rest-api/bisdaqc/1iqouyb/vsdfptm/nn/crypted.ps1","pattern":"[url:value = 'http://8.136.138.165/wp-includes/rest-api/bisdaqc/1iqouyb/vsdfptm/nn/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a424ecd-25ee-f1f1-2237-00009b2902f0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.123.190:47054/bin.sh","pattern":"[url:value = 'http://61.53.123.190:47054/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6b47077-c2c4-0eaf-2478-000046fb35ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://deliverymailreport.co.za/img_043346.png","pattern":"[url:value = 'https://deliverymailreport.co.za/img_043346.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf8acb9b-65b4-edb0-3b90-0000205376bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://deliverymailreport.co.za/MSI_PRO.png","pattern":"[url:value = 'https://deliverymailreport.co.za/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ca5908a-13ae-17ec-395f-0000cf290609","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://deliverymailreport.co.za/img_043509.png","pattern":"[url:value = 'https://deliverymailreport.co.za/img_043509.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80688b95-37f5-ea3d-f6fe-000094b097df","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://deliverymailreport.co.za/img_003940.png","pattern":"[url:value = 'https://deliverymailreport.co.za/img_003940.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05b24f00-6f1f-9a20-ba52-0000a6f8c4c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://deliverymailreport.co.za/img_003735.png","pattern":"[url:value = 'https://deliverymailreport.co.za/img_003735.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be20655f-4633-2c18-711b-0000b07293b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://deliverymailreport.co.za/img_043051.png","pattern":"[url:value = 'https://deliverymailreport.co.za/img_043051.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a0335ca-0a46-b133-de2b-00005376c53e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.168.179:52810/i","pattern":"[url:value = 'http://182.127.168.179:52810/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d5783a4-7c11-944c-64ce-0000cfa6bfd0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.123.190:47054/i","pattern":"[url:value = 'http://61.53.123.190:47054/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ad32b88-bc6e-ac7c-9919-000072fa71eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.231.225.170:59950/bin.sh","pattern":"[url:value = 'http://113.231.225.170:59950/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9e7bc62-2347-7ff4-04a9-0000c93bcc26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.42.30.58:48392/i","pattern":"[url:value = 'http://125.42.30.58:48392/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb190eb7-aedf-5995-9e95-0000ce8f289e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.231.225.170:59950/i","pattern":"[url:value = 'http://113.231.225.170:59950/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4efacf1-2818-f8c0-9094-0000727750f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.177.102.201:45262/bin.sh","pattern":"[url:value = 'http://42.177.102.201:45262/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--feaca9e6-410f-a7ab-8b8e-0000f9bc0121","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://coconutoficial.com.br/img/stego_anepqnd5rj.png","pattern":"[url:value = 'https://coconutoficial.com.br/img/stego_anepqnd5rj.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21b16fa1-ba61-d321-0149-000072cf86aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/softbot.mips","pattern":"[url:value = 'http://91.92.47.97/softbot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8503f98-fb9d-8656-9371-000034c3d796","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://flicargo.com/.well-known/New/stego_ukhdu9nsgd.png","pattern":"[url:value = 'https://flicargo.com/.well-known/New/stego_ukhdu9nsgd.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cba6a7d-58cd-f548-0c67-00001cf9674e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://flicargo.com/.well-known/New/stego_shot.png","pattern":"[url:value = 'https://flicargo.com/.well-known/New/stego_shot.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c08a2be6-bf70-9cc1-117f-000022047e2b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://flicargo.com/.well-known/New/stego_BB.png","pattern":"[url:value = 'https://flicargo.com/.well-known/New/stego_BB.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--679c49b8-98d3-4ec4-3076-0000e739c142","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://flicargo.com/.well-known/New/stego_rabit.png","pattern":"[url:value = 'https://flicargo.com/.well-known/New/stego_rabit.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bf5497a-06d2-d752-fdda-0000417c5acc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://eccmice.com/dot/x1.png","pattern":"[url:value = 'https://eccmice.com/dot/x1.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f2c1a29-4a45-f756-29c7-0000411faee6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://eccmice.com/dot/a1.png","pattern":"[url:value = 'https://eccmice.com/dot/a1.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--588c60f9-f06c-cfa9-9ab1-0000cf90a905","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://eccmice.com/dot/a2.png","pattern":"[url:value = 'https://eccmice.com/dot/a2.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--682afefc-388b-2ede-f8d5-0000192cca97","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://eccmice.com/dot/nd7.png","pattern":"[url:value = 'https://eccmice.com/dot/nd7.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--175d6f49-f911-f15d-1c0c-00007c82a9d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://eccmice.com/dot/mb.png","pattern":"[url:value = 'https://eccmice.com/dot/mb.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef342c64-0ca3-566e-00d0-0000a32db9a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://eccmice.com/dot/mk4.png","pattern":"[url:value = 'https://eccmice.com/dot/mk4.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee7aa8fc-9306-9307-37fd-00009ea66137","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://eccmice.com/dot/n1.png","pattern":"[url:value = 'https://eccmice.com/dot/n1.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8837563-76ac-198e-e00d-0000981e6f26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://munihuacho.gob.pe/imagenes2/MSI_PRO.png","pattern":"[url:value = 'https://munihuacho.gob.pe/imagenes2/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad2abf54-6019-4d00-2321-00002725b8ce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.252.216.68:38543/i","pattern":"[url:value = 'http://180.252.216.68:38543/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7e0b01e-d24e-cf6b-aa86-0000a60187c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.146.117.140:46175/bin.sh","pattern":"[url:value = 'http://175.146.117.140:46175/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1f3c1e3-099b-8fa0-3fe2-0000a9876e1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.11.180.8:45505/bin.sh","pattern":"[url:value = 'http://123.11.180.8:45505/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbfcebfb-101b-8984-bc02-000044664d74","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.165.85.188:32874/i","pattern":"[url:value = 'http://175.165.85.188:32874/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7856fe70-cf30-7a8d-26a8-0000a8b01574","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.34/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.34/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10819ff1-cc26-8332-8126-00002c16793a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.34/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.34/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21ad4be4-8ee4-71bc-7bb3-0000e1777468","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4ba1a9722212abed.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4ba1a9722212abed.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63e29973-bed4-1266-374f-00004c4621c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.41/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.41/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36f29821-1911-0e3b-fa48-000027d2fa6d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.41/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.41/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a6fa811-1b78-b05b-5221-00005241c64b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.140.183.208:50797/i","pattern":"[url:value = 'http://222.140.183.208:50797/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab8a3d10-4b1f-6046-9119-00008fd5c4f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.38/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.38/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a890cd7-67a2-152d-d5a2-0000446112a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.38/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.38/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6a18ec4-ead2-d595-d047-000066015d2f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.111/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.111/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b6fae7b-3cb0-0f05-b22b-0000415b2fca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.111/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.111/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4aec9e0b-49fd-2754-ef20-0000be5da3c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.24.21.177:55825/i","pattern":"[url:value = 'http://36.24.21.177:55825/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2b85e9e-fede-ac0f-e277-0000e2799bf2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.11.180.8:45505/i","pattern":"[url:value = 'http://123.11.180.8:45505/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8be5dcee-a449-4e81-17cb-0000aae7246b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.240/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.240/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43b00ad1-aff2-dd2e-6ad3-000049b341ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.240/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.240/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f83464df-e261-e14e-c968-000052866d4d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://104.249.10.137/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://104.249.10.137/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--106794d5-87f7-692d-2188-0000b9cf0980","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/arm6","pattern":"[url:value = 'http://176.65.139.139/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb118ff3-76b3-dc89-b61f-0000955f2caa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.178.111:42241/i","pattern":"[url:value = 'http://182.127.178.111:42241/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fcc6ae8-4d14-6044-9ecc-00005e47c98f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/x86_64","pattern":"[url:value = 'http://176.65.139.139/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff348a29-2838-6b80-56f1-00002332bc4a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/m68k","pattern":"[url:value = 'http://176.65.139.139/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78a8c711-3bab-51ec-f1bd-0000b524e6c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/spc","pattern":"[url:value = 'http://176.65.139.139/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--575c4886-0aeb-b954-a73a-00004bb3fa19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/x86","pattern":"[url:value = 'http://176.65.139.139/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fbc9b1f-d637-4b27-41cb-0000b36e0d9a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/sh4","pattern":"[url:value = 'http://176.65.139.139/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6760a443-6136-b2bb-5ea0-000001736ee5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/arm7","pattern":"[url:value = 'http://176.65.139.139/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57fe8281-1340-a9be-1f10-00004731119c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/persist.arm7","pattern":"[url:value = 'http://176.65.139.139/persist.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b318beff-03ac-b9f9-34d7-000023c46a90","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/mips","pattern":"[url:value = 'http://176.65.139.139/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06ca7836-c166-4e2a-d28a-000048c704da","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/mpsl","pattern":"[url:value = 'http://176.65.139.139/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aee7948-efeb-40ca-4bcf-000033b0946c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/ppc","pattern":"[url:value = 'http://176.65.139.139/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--658c3037-6bdf-7173-96c3-0000ee1a4f26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/i686","pattern":"[url:value = 'http://176.65.139.139/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20db185d-e380-53a4-d28a-000003086b68","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.146.117.140:46175/i","pattern":"[url:value = 'http://175.146.117.140:46175/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35026b4b-7258-3842-4219-0000e0bef4fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.77.45:59612/i","pattern":"[url:value = 'http://182.117.77.45:59612/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef59a81b-fd1d-657d-514b-0000906cd661","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://219.155.81.115:40911/i","pattern":"[url:value = 'http://219.155.81.115:40911/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bf79e53-8fcc-5487-122a-000056971507","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.213.115.26:45049/i","pattern":"[url:value = 'http://27.213.115.26:45049/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b287f2d6-5093-cdd2-410c-000028249922","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.62.249:60152/i","pattern":"[url:value = 'http://61.52.62.249:60152/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8066bec-0d7d-1399-4120-00003be47bcb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.113.40.115:55056/i","pattern":"[url:value = 'http://182.113.40.115:55056/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91afe0ef-8349-0a15-c4d5-00004edf9f37","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://174.105.154.212:55690/bin.sh","pattern":"[url:value = 'http://174.105.154.212:55690/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d92d717-8968-81c2-e961-00003d6751e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.239.76.28:33921/i","pattern":"[url:value = 'http://42.239.76.28:33921/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f19a555f-d6e5-4630-e4df-00004480ff99","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.230.68.198:56133/i","pattern":"[url:value = 'http://113.230.68.198:56133/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--679cac18-1d78-a34d-c055-00001d489b8b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.184.120:39468/bin.sh","pattern":"[url:value = 'http://42.231.184.120:39468/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efb4a835-2e63-4eb6-d42d-00007c04234e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.70.235.87:40268/bin.sh","pattern":"[url:value = 'http://36.70.235.87:40268/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fac4b680-e462-027f-8a9f-00003bd55143","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.184.120:39468/i","pattern":"[url:value = 'http://42.231.184.120:39468/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30172bdf-f8b4-2fad-6df9-000087004f3d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.248.105.21:52064/bin.sh","pattern":"[url:value = 'http://112.248.105.21:52064/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e139e2cf-3dc0-8cdb-77f4-00005dc88d54","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.226.211.193:43686/bin.sh","pattern":"[url:value = 'http://42.226.211.193:43686/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06b751c9-07f9-19e5-5903-00009cada25d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.59.235.202:51478/bin.sh","pattern":"[url:value = 'http://42.59.235.202:51478/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b39db7bd-cc65-1e7c-b619-00001ccaffd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.59.234.164:44742/bin.sh","pattern":"[url:value = 'http://42.59.234.164:44742/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78154df2-8393-55f7-dc7f-00006a3c37cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.248.105.21:52064/i","pattern":"[url:value = 'http://112.248.105.21:52064/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aec8be9-880e-59ec-e32d-0000238e4148","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.144.135:58810/i","pattern":"[url:value = 'http://115.48.144.135:58810/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2d08983-b967-ab0d-ac23-00007b971103","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.226.211.193:43686/i","pattern":"[url:value = 'http://42.226.211.193:43686/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61e257f1-603f-c337-3e13-0000fb8e14ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.137.206.166:45619/bin.sh","pattern":"[url:value = 'http://61.137.206.166:45619/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80dceb15-1c18-5244-c93b-0000dc74906d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.219.119.136:59026/i","pattern":"[url:value = 'http://27.219.119.136:59026/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65e180b2-a052-0ef6-fe3b-0000de222510","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.50.82.162:60042/bin.sh","pattern":"[url:value = 'http://115.50.82.162:60042/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbceed64-635a-235f-ae18-00002ca444bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.214.165:40665/bin.sh","pattern":"[url:value = 'http://221.15.214.165:40665/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f12a42f-7b75-1599-dc30-0000feb54c89","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.116.21.39:52171/bin.sh","pattern":"[url:value = 'http://182.116.21.39:52171/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89fde310-51d0-cd5a-23e7-00005e0fc8d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.50.82.162:60042/i","pattern":"[url:value = 'http://115.50.82.162:60042/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85c9836b-706d-8406-adcf-000042e2d076","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.116.21.39:52171/i","pattern":"[url:value = 'http://182.116.21.39:52171/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e147108-f8cd-dcb3-26ca-0000d69b8892","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.232.254.209:49853/i","pattern":"[url:value = 'http://113.232.254.209:49853/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81411f01-f9ed-4290-ad86-000039355080","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.14.253:33653/bin.sh","pattern":"[url:value = 'http://123.11.14.253:33653/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceac35c9-f722-61c3-2787-00001759c5da","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.55.161.237:35487/i","pattern":"[url:value = 'http://115.55.161.237:35487/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb6e6cd8-5515-7066-f5f2-000014ae4969","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.235.135:48342/i","pattern":"[url:value = 'http://222.138.235.135:48342/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f8ae20b-cc48-3ada-b8f7-000099065150","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.52.242.168:48270/bin.sh","pattern":"[url:value = 'http://115.52.242.168:48270/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd9ea6ce-38a5-4a71-a13f-000080ad5b35","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.123.210.95:52102/bin.sh","pattern":"[url:value = 'http://182.123.210.95:52102/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef675fb0-e8ba-654b-8f11-0000dfdd0e31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.14.253:33653/i","pattern":"[url:value = 'http://123.11.14.253:33653/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--886f245e-ddca-0fa8-14e3-0000beb1dbf3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.243.95.50:59704/i","pattern":"[url:value = 'http://222.243.95.50:59704/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ad95afd-18a0-e777-8d94-0000f6317ad9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.140.183.70:34777/i","pattern":"[url:value = 'http://222.140.183.70:34777/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c92a64e-409d-2886-dbec-0000682e0c0f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.212.173.225:52589/bin.sh","pattern":"[url:value = 'http://66.212.173.225:52589/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f2b54e0-711f-f6d5-4208-00002ffff461","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.149.175:36753/bin.sh","pattern":"[url:value = 'http://115.48.149.175:36753/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--558aada6-ce2a-9634-01de-00003f47ccb3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.123.210.95:52102/i","pattern":"[url:value = 'http://182.123.210.95:52102/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f760093-882b-32f0-9490-0000b2459761","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://217.64.135.181:55489/i","pattern":"[url:value = 'http://217.64.135.181:55489/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c15ce1d-ce81-662e-7fce-0000d82c6bfa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.3.74:35880/i","pattern":"[url:value = 'http://182.113.3.74:35880/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--979aae84-acf0-fcd3-2899-000032141d58","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.117.86.246:45059/bin.sh","pattern":"[url:value = 'http://182.117.86.246:45059/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d4ab492-01c8-3c75-98eb-00001c41ea4f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.117.86.246:45059/i","pattern":"[url:value = 'http://182.117.86.246:45059/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac9dcc82-cb39-6c68-52e4-0000ff36fd57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.235.82.252:57371/bin.sh","pattern":"[url:value = 'http://42.235.82.252:57371/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bddb2b11-16a6-7f19-0653-00008ee37a61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.212.173.225:52589/i","pattern":"[url:value = 'http://66.212.173.225:52589/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c849a545-d745-6de8-a503-00005e57bbd5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.165.142.110:57080/bin.sh","pattern":"[url:value = 'http://175.165.142.110:57080/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0285a178-0cb3-1510-a4c0-0000845a8643","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.149.175:36753/i","pattern":"[url:value = 'http://115.48.149.175:36753/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8c0372f-38f8-6e0f-a746-0000cc04265f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.52.242.168:48270/i","pattern":"[url:value = 'http://115.52.242.168:48270/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3b9cab4-ce76-f377-f5f5-0000b589274d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.53.75.99:58786/i","pattern":"[url:value = 'http://61.53.75.99:58786/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38c4f819-f04f-dfdb-cb79-0000a7edb075","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.232.179.142:50106/i","pattern":"[url:value = 'http://42.232.179.142:50106/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07d31d7c-3faf-a4f3-52a5-0000492b3bef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.165.142.110:57080/i","pattern":"[url:value = 'http://175.165.142.110:57080/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f49e5a95-1f15-b4f3-c5dc-0000584d34dc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.235.82.252:57371/i","pattern":"[url:value = 'http://42.235.82.252:57371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ec5af8d-f715-594b-8a6d-0000df0a5bea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.62.249:60152/bin.sh","pattern":"[url:value = 'http://61.52.62.249:60152/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ce23c9c-825a-c177-c1e9-00003d88fe8d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.120.1.2:48934/i","pattern":"[url:value = 'http://182.120.1.2:48934/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57c26f40-d2d2-5beb-34f3-000013e31ccd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.117.0.179:35408/bin.sh","pattern":"[url:value = 'http://182.117.0.179:35408/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23e950b7-c08f-b9ab-5356-0000570aaa90","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.140.182.112:48863/i","pattern":"[url:value = 'http://222.140.182.112:48863/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd34384b-6294-4aff-8a8f-0000be926f0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.137.198.130:51494/bin.sh","pattern":"[url:value = 'http://61.137.198.130:51494/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f73b7abc-d4e4-0d13-07e5-00005ce93a75","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.189.172.160:60627/bin.sh","pattern":"[url:value = 'http://119.189.172.160:60627/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--323486f6-5155-0188-f1d3-000009528186","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.117.0.179:35408/i","pattern":"[url:value = 'http://182.117.0.179:35408/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9158c8c9-ff49-7b31-4aca-00000c9b6c70","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.137.174.198:33777/bin.sh","pattern":"[url:value = 'http://222.137.174.198:33777/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cea8e2a6-6ed0-1018-f1f8-00009dc6de06","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://45.194.25.221:57073/bin.sh","pattern":"[url:value = 'http://45.194.25.221:57073/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06211192-5f85-0f02-d93e-000015511a78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.115.67.25:54765/i","pattern":"[url:value = 'http://119.115.67.25:54765/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99fe272f-6e1d-6aad-5faf-000047a72994","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.189.172.160:60627/i","pattern":"[url:value = 'http://119.189.172.160:60627/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--708b76cc-7c9d-d7f1-40ef-00006fccae22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.85.209.65:57573/bin.sh","pattern":"[url:value = 'http://42.85.209.65:57573/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46333829-dc79-141a-a2e0-00006ba5e56a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.20.178:46432/bin.sh","pattern":"[url:value = 'http://125.43.20.178:46432/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--005811fc-a827-0811-2621-00007ec135cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.137.174.198:33777/i","pattern":"[url:value = 'http://222.137.174.198:33777/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01a33ccb-df42-bbc5-16e2-000055a0b7a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.85.209.65:57573/i","pattern":"[url:value = 'http://42.85.209.65:57573/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e330b79-d0ee-342b-65b7-0000f372aef2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.53.205.255:56935/bin.sh","pattern":"[url:value = 'http://61.53.205.255:56935/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8238ced2-7eab-c239-1dc3-00000700e62c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.213.115.26:45049/bin.sh","pattern":"[url:value = 'http://27.213.115.26:45049/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c07abee6-3ac0-8d59-a074-0000938ff268","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.53.205.255:56935/i","pattern":"[url:value = 'http://61.53.205.255:56935/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd91a52a-abeb-5650-4617-000095d46d2b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.58.88.2:47310/bin.sh","pattern":"[url:value = 'http://115.58.88.2:47310/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93a4d2ad-9895-613e-fd52-000047634b62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.233.94.151:57893/bin.sh","pattern":"[url:value = 'http://185.233.94.151:57893/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3519fcf8-a730-5a5f-7fde-000093c36182","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.233.94.151:57893/i","pattern":"[url:value = 'http://185.233.94.151:57893/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c57f112-b2ba-174d-9bbb-0000137c2647","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.58.88.2:47310/i","pattern":"[url:value = 'http://115.58.88.2:47310/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cfaea3e-cece-0109-3f00-0000237a8d2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.138.47.10:38730/bin.sh","pattern":"[url:value = 'http://116.138.47.10:38730/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14fe0ab1-d86e-c88f-4bef-00009000e60c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://83.68.249.16:45432/bin.sh","pattern":"[url:value = 'http://83.68.249.16:45432/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeb2fc1a-6ca4-6fe5-dcda-000078a11fb7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.246.89:58052/bin.sh","pattern":"[url:value = 'http://125.43.246.89:58052/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14666f7f-5e8c-37cc-48d6-0000ed6fd9d2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.79.50:50740/bin.sh","pattern":"[url:value = 'http://182.117.79.50:50740/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59056232-83f4-aca9-4cd5-0000f43889a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.51.35.175:41863/i","pattern":"[url:value = 'http://115.51.35.175:41863/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3e6e804-7f57-0fc2-dbac-00002cb1d308","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.243.238.134:46379/i","pattern":"[url:value = 'http://61.243.238.134:46379/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34692ed9-e406-632b-f123-000049479bf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.246.89:58052/i","pattern":"[url:value = 'http://125.43.246.89:58052/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5753ca00-f170-67f1-1556-000037017a73","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.79.50:50740/i","pattern":"[url:value = 'http://182.117.79.50:50740/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92cf9b73-13d0-f375-c277-00003baf1fc5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.3.121:52162/bin.sh","pattern":"[url:value = 'http://125.40.3.121:52162/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b276c5da-cd79-0359-7148-00007b8302f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.40.3.121:52162/i","pattern":"[url:value = 'http://125.40.3.121:52162/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a1d0200-24bf-bb41-c6a5-0000a5464b9f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.116.23.190:59128/bin.sh","pattern":"[url:value = 'http://182.116.23.190:59128/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86fcafb2-bc6d-801e-5f94-0000af387147","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.175.210.205:34753/i","pattern":"[url:value = 'http://175.175.210.205:34753/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44bde355-33ab-2ad3-ca20-00005e82c6af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://101.29.22.214:59328/bin.sh","pattern":"[url:value = 'http://101.29.22.214:59328/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43fc6841-af76-09e5-872d-00009c01fd82","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.116.23.190:59128/i","pattern":"[url:value = 'http://182.116.23.190:59128/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5889bc80-ab2f-195d-b727-0000c9578446","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.55.247.47:34358/i","pattern":"[url:value = 'http://115.55.247.47:34358/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c76d5d74-ed06-5952-4b4d-00009b98bb19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.11.10.210:60891/bin.sh","pattern":"[url:value = 'http://123.11.10.210:60891/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d762127-726f-be69-e7e4-0000fc8dd41c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.11.10.210:60891/i","pattern":"[url:value = 'http://123.11.10.210:60891/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bb392c7-9978-2b7a-f010-00007189cf9e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://101.29.22.214:59328/i","pattern":"[url:value = 'http://101.29.22.214:59328/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4079dbc3-58f1-6c29-a64e-00002c8ab8bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.53.75.99:58786/bin.sh","pattern":"[url:value = 'http://61.53.75.99:58786/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cec7e1ab-576b-e1b2-b6a6-0000633e625f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.239.223.142:55389/bin.sh","pattern":"[url:value = 'http://113.239.223.142:55389/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3794bfa-1f76-1322-e624-00007671ec3d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.22.1:46570/bin.sh","pattern":"[url:value = 'http://221.15.22.1:46570/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--daeb5cac-de61-1492-4300-000005c2c8d8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.138.47.10:38730/i","pattern":"[url:value = 'http://116.138.47.10:38730/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71253e4b-5a7b-1746-63bf-00008278e8c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.150.176.248:50980/i","pattern":"[url:value = 'http://175.150.176.248:50980/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2acc9a02-ab38-ce2b-870f-0000ee8e7de1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.12.234.38:40280/bin.sh","pattern":"[url:value = 'http://123.12.234.38:40280/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8e436f9-b250-808f-040f-00006018ba4d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.239.223.142:55389/i","pattern":"[url:value = 'http://113.239.223.142:55389/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cd5d43a-9493-93c9-e034-0000ce670334","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.215.124.221:49908/bin.sh","pattern":"[url:value = 'http://27.215.124.221:49908/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b6b6dd7-65b3-ef6d-9ae7-00007683cb2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.22.1:46570/i","pattern":"[url:value = 'http://221.15.22.1:46570/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95df042a-5026-e3fd-4343-0000b3ac8c4c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.41.228.121:39428/bin.sh","pattern":"[url:value = 'http://125.41.228.121:39428/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b13ba32e-21ef-7d41-40d6-0000f28428fb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.4.233.107:35672/i","pattern":"[url:value = 'http://123.4.233.107:35672/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c84565b-7df8-dfb9-3001-000092ab3968","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://122.139.14.243:51081/bin.sh","pattern":"[url:value = 'http://122.139.14.243:51081/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--010bd8d7-0c92-00d8-0eac-0000a283f085","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.224.49.156:55210/bin.sh","pattern":"[url:value = 'http://42.224.49.156:55210/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0b5da19-3e1c-d4ec-bffd-0000275db777","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.41.228.121:39428/i","pattern":"[url:value = 'http://125.41.228.121:39428/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3212e7e-f429-ae58-1c80-0000ed771935","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.54.190.223:33351/bin.sh","pattern":"[url:value = 'http://61.54.190.223:33351/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3908670-856e-77e1-81d3-00003d518184","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.242.199:48848/bin.sh","pattern":"[url:value = 'http://182.112.242.199:48848/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18a89409-736d-5f56-0b3a-000036871afd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.14.177.167:35854/bin.sh","pattern":"[url:value = 'http://123.14.177.167:35854/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b9c7d74-1216-9267-bfc2-0000c4a65d8d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.53.83.215:50416/i","pattern":"[url:value = 'http://61.53.83.215:50416/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96a76d3f-b618-8177-0744-000043a0c434","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.44.39.164:59869/bin.sh","pattern":"[url:value = 'http://125.44.39.164:59869/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe8f753d-4085-c134-df21-0000f78a2091","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.242.199:48848/i","pattern":"[url:value = 'http://182.112.242.199:48848/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--145a2e49-be5a-2f2c-41a3-00000b844233","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://39.79.0.238:46471/bin.sh","pattern":"[url:value = 'http://39.79.0.238:46471/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70bed1d5-6ee6-22e9-27e7-0000cbced8d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.189.23.122:60626/i","pattern":"[url:value = 'http://123.189.23.122:60626/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76f274cc-b3c4-72e5-ecc7-00007423053e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.248.106.88:54654/bin.sh","pattern":"[url:value = 'http://112.248.106.88:54654/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28703a9c-5bb1-36de-eaed-000075d3ab57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://39.79.0.238:46471/i","pattern":"[url:value = 'http://39.79.0.238:46471/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b6bfbd7-ed88-8b2a-89cf-00005198e6f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.121.137.156:38226/i","pattern":"[url:value = 'http://182.121.137.156:38226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffa600c3-01f8-f166-8f16-0000582a6b95","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.248.106.88:54654/i","pattern":"[url:value = 'http://112.248.106.88:54654/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc2ea995-99e9-5334-ae58-0000acbd3506","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://220.177.11.228:55723/bin.sh","pattern":"[url:value = 'http://220.177.11.228:55723/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--389edd39-8425-104c-2b77-0000fced9e98","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.175.210.205:34753/bin.sh","pattern":"[url:value = 'http://175.175.210.205:34753/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37382a53-dea9-bb5e-3f0b-0000dde5a1c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.215.124.221:49908/i","pattern":"[url:value = 'http://27.215.124.221:49908/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd29d8d-7135-d963-e109-0000b1a98a2f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://120.84.213.157:48371/i","pattern":"[url:value = 'http://120.84.213.157:48371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7602049a-e905-bb30-0041-00008e90dcd6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.116.20.151:35587/i","pattern":"[url:value = 'http://182.116.20.151:35587/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8063a494-1173-6bba-e6f3-000010bc1c0d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.224.49.156:55210/i","pattern":"[url:value = 'http://42.224.49.156:55210/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--311bc945-b215-642b-1721-0000127aaf5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://218.13.149.41:47316/bin.sh","pattern":"[url:value = 'http://218.13.149.41:47316/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa8753df-f90a-9214-f6d9-000090e92f1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://219.156.34.146:35324/bin.sh","pattern":"[url:value = 'http://219.156.34.146:35324/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8086b90f-5e1b-c686-e269-0000cef631f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://219.156.34.146:35324/i","pattern":"[url:value = 'http://219.156.34.146:35324/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6402797f-b380-5201-bafc-0000bb28c934","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://83.219.1.198:34396/i","pattern":"[url:value = 'http://83.219.1.198:34396/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c64bccf0-99d4-f4f3-dfc3-0000c7f336e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.237.148.180:50714/bin.sh","pattern":"[url:value = 'http://112.237.148.180:50714/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aee47e48-7167-38e5-1e20-00009c24eb61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.224.70.52:48398/bin.sh","pattern":"[url:value = 'http://42.224.70.52:48398/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c3bf03f-09d2-70f0-d00a-00007ef6ef06","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.237.148.180:50714/i","pattern":"[url:value = 'http://112.237.148.180:50714/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a2f5ad5-caed-11df-a5c6-000094b13ad8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://216.196.170.32:4154/i","pattern":"[url:value = 'http://216.196.170.32:4154/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa3b6aef-bae4-4f14-c203-000078d1b8c0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.224.70.52:48398/i","pattern":"[url:value = 'http://42.224.70.52:48398/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38c864b8-97e6-048a-b9a5-0000ab150e1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.160.130.109:34175/bin.sh","pattern":"[url:value = 'http://103.160.130.109:34175/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14a09945-aada-fa22-ddd5-0000f472982a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://218.13.149.41:47316/i","pattern":"[url:value = 'http://218.13.149.41:47316/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35da7771-20a6-2273-a247-0000a73d9307","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.151.43.183:45405/bin.sh","pattern":"[url:value = 'http://103.151.43.183:45405/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--776d8fc1-f6f3-f2e2-e068-0000eb0320cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://221.15.184.239:49837/i","pattern":"[url:value = 'http://221.15.184.239:49837/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23402f3f-7f83-0457-5a36-0000bf819edd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.139.42.27:42240/bin.sh","pattern":"[url:value = 'http://222.139.42.27:42240/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--449cf2d4-c755-ff19-48e6-0000a1c58456","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://101.109.237.184:36403/bin.sh","pattern":"[url:value = 'http://101.109.237.184:36403/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1450a591-596d-1990-930e-0000b0bc8e25","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.188.94.210:49613/i","pattern":"[url:value = 'http://123.188.94.210:49613/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52dfb615-a49c-222a-db11-00004a68e21c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.198.130.112:60062/bin.sh","pattern":"[url:value = 'http://112.198.130.112:60062/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4352a78-dfb4-84a9-a46d-0000974c7499","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://120.57.122.56:42186/bin.sh","pattern":"[url:value = 'http://120.57.122.56:42186/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b077e3e8-f1bc-a97c-05e4-0000e8b580b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.215.86.140:41217/bin.sh","pattern":"[url:value = 'http://27.215.86.140:41217/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b091fe3-1be1-8028-e203-0000eb549d06","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.55.151.152:49757/i","pattern":"[url:value = 'http://115.55.151.152:49757/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f03abce8-8347-6916-7b37-0000ddfbfc40","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://119.117.164.177:41723/i","pattern":"[url:value = 'http://119.117.164.177:41723/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7198a6a5-1204-5afd-ffdc-00002d4cda4d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.55.55.56:36789/i","pattern":"[url:value = 'http://115.55.55.56:36789/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--138e8b51-cd1f-1d9c-0d0a-00004b7fee9d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.52.184.70:36515/i","pattern":"[url:value = 'http://61.52.184.70:36515/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fef92222-603c-ceb2-40db-0000ac6cdb46","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.8.9.18:35539/i","pattern":"[url:value = 'http://123.8.9.18:35539/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27aad9ba-b689-a4f5-4eb3-00005a460aef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.140.187.100:34139/i","pattern":"[url:value = 'http://116.140.187.100:34139/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c6fc150-9009-0138-172b-00009726f1e4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.40.24.46:51091/i","pattern":"[url:value = 'http://125.40.24.46:51091/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb1ce441-5544-67b4-329a-0000ab3dc845","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.141.138.63:42485/i","pattern":"[url:value = 'http://222.141.138.63:42485/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13b66af5-c0aa-86bb-9243-0000fa696112","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.44.38.130:50257/bin.sh","pattern":"[url:value = 'http://125.44.38.130:50257/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01d7ef28-02bd-1833-bcad-00000379faa3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.13.74.177:44056/i","pattern":"[url:value = 'http://123.13.74.177:44056/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eddf7e60-d1a7-8099-f771-00001b71155e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://85.108.84.109:50272/i","pattern":"[url:value = 'http://85.108.84.109:50272/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8823294-a059-98c2-215a-0000e0aae307","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.230.30.175:47203/i","pattern":"[url:value = 'http://113.230.30.175:47203/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97ab8362-ef32-bbb8-8702-0000ee8feb9f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://39.77.48.16:34314/i","pattern":"[url:value = 'http://39.77.48.16:34314/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--484ea9ea-b335-e417-8975-0000bea27ba7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.57.255.1:59779/bin.sh","pattern":"[url:value = 'http://115.57.255.1:59779/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--505fbdd2-ef94-6fd3-b654-0000d0c43830","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.244.41.109:53440/i","pattern":"[url:value = 'http://182.244.41.109:53440/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6e62fc6-d043-a2b2-4faf-00003a21d0aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.230.30.175:47203/bin.sh","pattern":"[url:value = 'http://113.230.30.175:47203/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bc1591e-7f54-3962-80b5-000065d4df64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://118.34.109.121:32776/bin.sh","pattern":"[url:value = 'http://118.34.109.121:32776/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d84242e-62ba-8cc9-5931-0000dd9888b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://66.8.135.142:58566/bin.sh","pattern":"[url:value = 'http://66.8.135.142:58566/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55d898c5-c5c9-a486-7d28-000052824ba4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://118.34.109.121:32776/i","pattern":"[url:value = 'http://118.34.109.121:32776/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1e31011-44dc-7b16-2833-00009a532ddb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.150.176.248:50980/bin.sh","pattern":"[url:value = 'http://175.150.176.248:50980/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--408efa2c-3be8-a56a-7bf6-000021725d7a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.140.183.70:34777/bin.sh","pattern":"[url:value = 'http://222.140.183.70:34777/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1eacaff-5485-1fcd-5bda-00003b244550","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.51.35.175:41863/bin.sh","pattern":"[url:value = 'http://115.51.35.175:41863/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--473caa01-225a-cf7c-f2bb-00008e33073a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://163.142.92.235:39139/bin.sh","pattern":"[url:value = 'http://163.142.92.235:39139/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f7d77bc-b835-e103-534c-000076f8a025","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.113.40.115:55056/bin.sh","pattern":"[url:value = 'http://182.113.40.115:55056/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09d2b2d3-cb70-d642-7dbe-0000c597b10c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.215.86.140:41217/i","pattern":"[url:value = 'http://27.215.86.140:41217/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3588532f-dbfd-d8b4-1e4b-0000b59241c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.56.113.61:36360/i","pattern":"[url:value = 'http://115.56.113.61:36360/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62598861-0d95-2e9a-e34f-00005c8e1fc8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.4.233.107:35672/bin.sh","pattern":"[url:value = 'http://123.4.233.107:35672/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d02579a-85e1-28ce-d995-00001f06d20a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://183.188.77.45:12907/bin.sh","pattern":"[url:value = 'http://183.188.77.45:12907/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cad0d12f-9f8e-08de-f2e1-0000d9976233","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.49.24.80:42107/bin.sh","pattern":"[url:value = 'http://115.49.24.80:42107/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee4391be-fe69-c233-aaca-0000bc393d2b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.204.195.233:38896/bin.sh","pattern":"[url:value = 'http://27.204.195.233:38896/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4d6c6a0-d3b1-2ed5-fbee-0000df1e1f03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://119.117.164.177:41723/bin.sh","pattern":"[url:value = 'http://119.117.164.177:41723/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ab02cb7-b6c1-b078-457d-0000c6377583","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.112.6.161:53066/i","pattern":"[url:value = 'http://182.112.6.161:53066/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ccbab57-4799-00ad-85d5-0000dcc003fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.97.30.141:52890/i","pattern":"[url:value = 'http://123.97.30.141:52890/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73b7ee97-03b4-88fa-ab8f-000099d213e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://114.226.31.25:56290/i","pattern":"[url:value = 'http://114.226.31.25:56290/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--500c892d-9ae3-8727-47ff-00002714ff64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.40.24.46:51091/bin.sh","pattern":"[url:value = 'http://125.40.24.46:51091/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0116e044-61b3-8095-b67f-0000294f260e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://114.227.224.253:36869/i","pattern":"[url:value = 'http://114.227.224.253:36869/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--113e6c91-5699-6b3c-2d8a-0000008eae78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://93.88.96.103:33908/i","pattern":"[url:value = 'http://93.88.96.103:33908/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bcfbdd5-bea1-0b5f-50cf-00002584bdda","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.98.147.69:48442/bin.sh","pattern":"[url:value = 'http://115.98.147.69:48442/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b495d110-d2ac-90ab-857b-0000f01675ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.52.190.88:42242/i","pattern":"[url:value = 'http://115.52.190.88:42242/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bd72b6b-9e4d-6f17-d06d-0000de33db5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.53.55.170:47643/i","pattern":"[url:value = 'http://42.53.55.170:47643/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3f25702-d853-0574-6143-000051bbc9d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://219.155.81.115:40911/bin.sh","pattern":"[url:value = 'http://219.155.81.115:40911/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8375cda7-e04c-0f19-8e38-0000767a2278","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.55.55.56:36789/bin.sh","pattern":"[url:value = 'http://115.55.55.56:36789/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98bff8e3-e96f-e0b0-cb14-0000d869ee67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.97.30.141:52890/bin.sh","pattern":"[url:value = 'http://123.97.30.141:52890/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ff0ab2b-3143-b49e-3dbf-000030207b1e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.55.49.244:41600/i","pattern":"[url:value = 'http://115.55.49.244:41600/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77a7cfbe-315f-44ee-ca4f-00003f666b09","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.243.238.134:46379/bin.sh","pattern":"[url:value = 'http://61.243.238.134:46379/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0e5b401-0bff-16f0-bc4a-0000a57d5272","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.160.130.109:34175/i","pattern":"[url:value = 'http://103.160.130.109:34175/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b815b096-1491-77b7-b68d-000084f0cb07","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.141.138.63:42485/bin.sh","pattern":"[url:value = 'http://222.141.138.63:42485/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bbd11b8-941b-5ad9-291d-0000d93206bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.57.66.51:42056/i","pattern":"[url:value = 'http://42.57.66.51:42056/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92796a4d-9559-20d6-d2e6-00003aff111a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.68.95.197:48234/i","pattern":"[url:value = 'http://103.68.95.197:48234/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3173985-2357-51c6-4191-00009edf945b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.224.100.62:51333/i","pattern":"[url:value = 'http://42.224.100.62:51333/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f35d82b-0b72-bdd8-3544-0000df3c6704","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.42.71.239:50213/bin.sh","pattern":"[url:value = 'http://115.42.71.239:50213/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5870d28c-78fe-58f5-bc1c-0000ff5271b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.57.255.1:59779/i","pattern":"[url:value = 'http://115.57.255.1:59779/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2507de9-ccec-b198-d606-0000a3bff83c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.113.205.36:51969/i","pattern":"[url:value = 'http://182.113.205.36:51969/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90656265-c6b1-c666-a831-0000d079d007","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.112.6.161:53066/bin.sh","pattern":"[url:value = 'http://182.112.6.161:53066/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec2a6b55-7af6-95b2-0d71-0000c3b3d2a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://114.227.224.253:36869/bin.sh","pattern":"[url:value = 'http://114.227.224.253:36869/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6408c2e0-b09b-169f-e91e-0000aa83a894","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://66.8.135.142:58566/i","pattern":"[url:value = 'http://66.8.135.142:58566/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4ece206-5089-eb81-f98a-0000350f0695","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.239.76.28:33921/bin.sh","pattern":"[url:value = 'http://42.239.76.28:33921/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--504243ad-05ee-4719-bae7-00006650b7b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.136.52.188:32973/bin.sh","pattern":"[url:value = 'http://222.136.52.188:32973/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa58ea61-482d-9e36-efd7-00007c4226e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.229.190.135:33907/bin.sh","pattern":"[url:value = 'http://113.229.190.135:33907/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d247b64-64d4-b2ca-9d13-00004b606283","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.44.38.130:50257/i","pattern":"[url:value = 'http://125.44.38.130:50257/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8a2861a-fd95-6c28-b925-0000b0c69eb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.225.15.213:35530/bin.sh","pattern":"[url:value = 'http://42.225.15.213:35530/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60314a07-91af-baa3-e04b-0000aa71f4fe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.113.205.36:51969/bin.sh","pattern":"[url:value = 'http://182.113.205.36:51969/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e20f3568-73dd-d06a-c9fb-0000803c00f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.42.71.239:50213/i","pattern":"[url:value = 'http://115.42.71.239:50213/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef8eb155-d3ba-d5fa-3060-000069df98c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.44.145.182:40164/i","pattern":"[url:value = 'http://27.44.145.182:40164/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b594c8f4-1732-35b0-2eda-0000b2fa940c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.60.223.148:58418/i","pattern":"[url:value = 'http://115.60.223.148:58418/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd5a5f88-ee87-a76e-bf0e-0000adcdf61a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.230.42.7:45769/i","pattern":"[url:value = 'http://42.230.42.7:45769/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddd74290-ac85-2bff-a454-0000d39d9773","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.49.6.248:33966/i","pattern":"[url:value = 'http://115.49.6.248:33966/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4457ea56-ec95-b4b4-3cac-0000cdd9c8d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.230.42.7:45769/bin.sh","pattern":"[url:value = 'http://42.230.42.7:45769/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a353941-cb4a-2e8d-b59b-0000dd19ebda","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.47.32.24:44968/i","pattern":"[url:value = 'http://125.47.32.24:44968/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78404942-0c4e-10fc-84f0-0000d00fa9a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.55.151.152:49757/bin.sh","pattern":"[url:value = 'http://115.55.151.152:49757/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f787757-23ec-5493-6c66-0000a3256bdb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.215.165:53887/i","pattern":"[url:value = 'http://120.84.215.165:53887/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--050e900c-e967-2afc-24f9-00006b951bd2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://124.234.246.166:55376/i","pattern":"[url:value = 'http://124.234.246.166:55376/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cd505ab-ab54-b37a-b017-0000aa9525ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.41.1.142:60668/i","pattern":"[url:value = 'http://125.41.1.142:60668/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1e378aa-3dd8-ddd3-702d-0000fe7cdde5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.98.147.69:48442/i","pattern":"[url:value = 'http://115.98.147.69:48442/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0473867-e1d3-a01f-0570-000046c9f013","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.241.136.218:42856/i","pattern":"[url:value = 'http://182.241.136.218:42856/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5d26638-788e-4ec9-96f0-000085748e8a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.189.3.1:47844/bin.sh","pattern":"[url:value = 'http://196.189.3.1:47844/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cf61f2e-67a7-f493-830b-00005f21778f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.241.136.218:42856/bin.sh","pattern":"[url:value = 'http://182.241.136.218:42856/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edeec56c-dc06-4331-ba31-000044849b73","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.151.224.238:59568/i","pattern":"[url:value = 'http://175.151.224.238:59568/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e51a5b19-05c1-ce41-eabe-000043aca051","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.189.3.1:47844/i","pattern":"[url:value = 'http://196.189.3.1:47844/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--635ed0dc-8802-3b55-6673-00007d0e3075","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://120.57.122.56:42186/i","pattern":"[url:value = 'http://120.57.122.56:42186/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cd578ab-748c-f4d3-403c-000030042296","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.198.130.112:60062/i","pattern":"[url:value = 'http://112.198.130.112:60062/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fab88c1-5779-f06d-24b6-0000d645d175","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.126.118.161:54312/bin.sh","pattern":"[url:value = 'http://182.126.118.161:54312/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a91c3657-7cb8-e422-449f-00000098b008","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.0.60.188:40182/i","pattern":"[url:value = 'http://175.0.60.188:40182/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b90f2cd6-761e-4535-6ee6-0000d4fc7aaa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://101.109.237.184:36403/i","pattern":"[url:value = 'http://101.109.237.184:36403/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27a61f6e-28ae-bc9a-98d9-000044d0abe0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.45.57.136:34620/bin.sh","pattern":"[url:value = 'http://125.45.57.136:34620/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4caaf9ae-cc4b-7ca1-6bdd-0000d4ed258a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.12.234.38:40280/i","pattern":"[url:value = 'http://123.12.234.38:40280/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e17734c-4751-c50d-dd5e-00000a379ea6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://77.230.168.62:51199/i","pattern":"[url:value = 'http://77.230.168.62:51199/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f647439-e19d-b27c-b605-0000de40823d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://24.54.95.49:35344/bin.sh","pattern":"[url:value = 'http://24.54.95.49:35344/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aabdf22c-9880-ee9e-2867-0000567bb68e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.45.57.136:34620/i","pattern":"[url:value = 'http://125.45.57.136:34620/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--171b06a0-b872-1985-7156-0000f13176b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.230.83.154:45105/i","pattern":"[url:value = 'http://113.230.83.154:45105/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fbe74d0-ec7d-014b-0918-00001e7552f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://59.96.139.68:54390/bin.sh","pattern":"[url:value = 'http://59.96.139.68:54390/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d387ac08-b727-1a78-44fe-00008b0bf1a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://162.255.251.91:33299/bin.sh","pattern":"[url:value = 'http://162.255.251.91:33299/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8741220a-51dc-4cf1-86f2-00005f88f7d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://162.255.251.91:33299/i","pattern":"[url:value = 'http://162.255.251.91:33299/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46af6127-c3e2-e79e-8ad5-000045931629","created":"2026-08-23T06:20:51-04:00","modified":"2026-08-23T06:20:52-04:00","name":"ip: 8.130.121.151","pattern":"[ipv4-addr:value = '8.130.121.151']","pattern_type":"stix","valid_from":"2026-08-23T06:20:51-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d00b9a29-2269-236a-a514-0000f17f8697","created":"2026-08-23T06:20:51-04:00","modified":"2026-08-23T06:20:52-04:00","name":"ip: 138.68.108.72","pattern":"[ipv4-addr:value = '138.68.108.72']","pattern_type":"stix","valid_from":"2026-08-23T06:20:51-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccf95b1f-df04-9867-bac4-00009400f936","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 99.45.236.27","pattern":"[ipv4-addr:value = '99.45.236.27']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fc15af0-ed96-a434-c289-00003ae1f5bb","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 99.249.183.235","pattern":"[ipv4-addr:value = '99.249.183.235']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc8d9c08-e085-3994-0c14-000094832ac7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 99.249.135.86","pattern":"[ipv4-addr:value = '99.249.135.86']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ca77332-04bd-363e-3b13-0000819f5b7d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 99.249.112.236","pattern":"[ipv4-addr:value = '99.249.112.236']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc5218c8-bfe1-f5ea-2f7d-0000b5ac8a6f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 99.237.52.2","pattern":"[ipv4-addr:value = '99.237.52.2']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05f5aa3f-16b7-89cf-afa2-0000cb3ed612","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 99.227.229.131","pattern":"[ipv4-addr:value = '99.227.229.131']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc2b68fd-5371-2c42-8102-00004798399c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 99.224.131.187","pattern":"[ipv4-addr:value = '99.224.131.187']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--254e6828-543e-fb4b-c26a-0000bbd7d1a3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 99.114.206.61","pattern":"[ipv4-addr:value = '99.114.206.61']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7009ede-f024-f9e6-26c0-0000adef02ff","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 99.114.206.57","pattern":"[ipv4-addr:value = '99.114.206.57']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4cd1282-a503-210f-3853-00005fef9c61","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.97.83.98","pattern":"[ipv4-addr:value = '98.97.83.98']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be0a8a32-78c7-70dc-ec48-000045fe3368","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.97.151.71","pattern":"[ipv4-addr:value = '98.97.151.71']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26490dc1-817b-fe73-38a3-000009b30fd6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.97.151.104","pattern":"[ipv4-addr:value = '98.97.151.104']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6677ea48-973d-6864-c409-0000dd9c1b31","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.93.167.141","pattern":"[ipv4-addr:value = '98.93.167.141']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83ebe5aa-4ffc-6993-9cb8-0000216b7252","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.92.183.234","pattern":"[ipv4-addr:value = '98.92.183.234']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--facedf15-5fa4-4d2f-7019-0000843a60b2","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.91.231.170","pattern":"[ipv4-addr:value = '98.91.231.170']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--644a8c93-8264-3f5a-79a2-00001b81c1b5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.91.209.6","pattern":"[ipv4-addr:value = '98.91.209.6']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35e7ddd2-0791-a0a8-1628-0000ee8f8f3e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.86.173.85","pattern":"[ipv4-addr:value = '98.86.173.85']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46cbd134-4594-0c70-3fa3-0000ef1de453","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.80.4.49","pattern":"[ipv4-addr:value = '98.80.4.49']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--803fbfab-c3ac-cc7b-b194-0000b3cef82d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.80.215.201","pattern":"[ipv4-addr:value = '98.80.215.201']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--850b512e-e4e1-c883-4622-0000b2885e68","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.43.29.1","pattern":"[ipv4-addr:value = '98.43.29.1']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a67a2d89-5b9d-6014-7d53-00000a7d6a20","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.22.145.68","pattern":"[ipv4-addr:value = '98.22.145.68']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed9c6b7a-93c3-d234-0556-0000aa53771d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.202.140.14","pattern":"[ipv4-addr:value = '98.202.140.14']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f00a044-1a4b-768a-d7bd-0000e720d5c4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.199.111.73","pattern":"[ipv4-addr:value = '98.199.111.73']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc5e612b-6459-1a7a-82ab-0000e926e3d4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.190.61.254","pattern":"[ipv4-addr:value = '98.190.61.254']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c4c01d0-3152-acaa-ebac-000053dc3ae8","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.190.61.247","pattern":"[ipv4-addr:value = '98.190.61.247']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30427305-84b9-49e7-6ec0-0000119857ac","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.180.242.243","pattern":"[ipv4-addr:value = '98.180.242.243']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a442a982-99fc-0165-8285-0000035cf6ea","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.175.32.237","pattern":"[ipv4-addr:value = '98.175.32.237']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cafd304-58e9-c925-0a60-0000de5599e8","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.175.158.5","pattern":"[ipv4-addr:value = '98.175.158.5']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a809990-92ed-ba75-1caa-00005d711857","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.174.61.78","pattern":"[ipv4-addr:value = '98.174.61.78']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--277e3e5c-4cf0-6ede-f63b-0000728c9ba0","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.174.39.246","pattern":"[ipv4-addr:value = '98.174.39.246']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed7113c2-9ce9-1406-8024-0000d891aa4e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.174.39.23","pattern":"[ipv4-addr:value = '98.174.39.23']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4a8e80f-7b1c-aa42-b369-00008caa2100","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.168.101.144","pattern":"[ipv4-addr:value = '98.168.101.144']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f603f10-29e4-bc83-03ea-00005947c321","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.118.135.235","pattern":"[ipv4-addr:value = '98.118.135.235']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc41a7ef-7b5a-6f64-8e1e-000034b7a604","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.111.211.243","pattern":"[ipv4-addr:value = '98.111.211.243']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fe2fc09-efc9-e169-3ab1-0000c02a39b1","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.100.78.54","pattern":"[ipv4-addr:value = '98.100.78.54']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ef97038-b301-2388-c5a7-0000e2795013","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 97.75.176.87","pattern":"[ipv4-addr:value = '97.75.176.87']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7eea7b1e-7de3-34d2-0e61-0000b6755aac","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 97.211.176.59","pattern":"[ipv4-addr:value = '97.211.176.59']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90226756-2016-161f-e513-00009ad42d26","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 97.211.104.169","pattern":"[ipv4-addr:value = '97.211.104.169']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca3c2bbd-c415-b244-96fb-0000583450a4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 97.137.143.133","pattern":"[ipv4-addr:value = '97.137.143.133']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7c58b29-c359-422f-9a35-00009bcf81ab","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 97.125.240.75","pattern":"[ipv4-addr:value = '97.125.240.75']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6c98896-ad84-6173-49b6-0000619b536a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 96.62.71.3","pattern":"[ipv4-addr:value = '96.62.71.3']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26d0e72d-8480-d852-399a-0000bba7b8c9","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 96.52.164.34","pattern":"[ipv4-addr:value = '96.52.164.34']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--130c4513-8e29-5898-caf2-0000c2ba54ac","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 96.27.48.216","pattern":"[ipv4-addr:value = '96.27.48.216']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13a913c4-4024-ed72-9da1-00008ecbf310","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 96.234.71.42","pattern":"[ipv4-addr:value = '96.234.71.42']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00dc4eb0-b452-08ef-5083-0000d04271de","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 96.22.217.74","pattern":"[ipv4-addr:value = '96.22.217.74']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f4b0b14-6fa1-0578-7224-00001c9ff2bb","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.97.203.206","pattern":"[ipv4-addr:value = '95.97.203.206']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da1ab0b1-ac14-50a4-5cb5-0000935c4542","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.85.252.87","pattern":"[ipv4-addr:value = '95.85.252.87']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e68a750a-588a-1333-0c3e-00007f63389e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.85.241.219","pattern":"[ipv4-addr:value = '95.85.241.219']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9495d4e-d3db-5228-486a-0000dec305a6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.81.217.243","pattern":"[ipv4-addr:value = '95.81.217.243']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dc55a55-8121-584a-a77b-0000e991bf13","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 95.65.66.242","pattern":"[ipv4-addr:value = '95.65.66.242']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af67332f-8181-99b4-bc00-0000082f4531","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.57.228.130","pattern":"[ipv4-addr:value = '95.57.228.130']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a16c0d27-9ca6-1e8b-ec16-00000197dc99","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 95.49.27.206","pattern":"[ipv4-addr:value = '95.49.27.206']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b625f1ed-6ac8-710f-164c-000084894a23","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.40.120.162","pattern":"[ipv4-addr:value = '95.40.120.162']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85b8ff3a-969f-8ee4-2242-0000ad480761","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 95.27.41.116","pattern":"[ipv4-addr:value = '95.27.41.116']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca38b431-f213-0a40-50f8-0000afb20932","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 95.27.139.70","pattern":"[ipv4-addr:value = '95.27.139.70']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b38fece-3793-41fc-4068-0000aa9fedce","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 95.216.4.60","pattern":"[ipv4-addr:value = '95.216.4.60']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66323b41-c5c9-92fc-46f4-0000fd8a427f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 95.178.113.84","pattern":"[ipv4-addr:value = '95.178.113.84']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75c7a022-8994-e6a4-81f9-0000d4872322","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.177.109.137","pattern":"[ipv4-addr:value = '95.177.109.137']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f852f326-694c-807f-8647-000042896bfd","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 95.173.188.94","pattern":"[ipv4-addr:value = '95.173.188.94']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3672dd89-b175-8ca0-961e-0000b7c00834","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.158.43.234","pattern":"[ipv4-addr:value = '95.158.43.234']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c09b0bc7-6288-e992-1e8a-0000b68aebb7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.153.108.140","pattern":"[ipv4-addr:value = '95.153.108.140']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f91235b7-36e6-157a-5245-000058d4b663","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.142.134.253","pattern":"[ipv4-addr:value = '95.142.134.253']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20014c59-728c-2638-5ab6-0000b1f0788a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.142.134.175","pattern":"[ipv4-addr:value = '95.142.134.175']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e079fe1e-bc03-8bfa-b8ec-00002ba7b390","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.0.32.43","pattern":"[ipv4-addr:value = '95.0.32.43']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3aa9ee0-2620-0a23-1768-0000ec2a2d28","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.0.32.116","pattern":"[ipv4-addr:value = '95.0.32.116']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4aa3cf5a-81ce-4af4-871c-0000ee6c9371","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.0.32.115","pattern":"[ipv4-addr:value = '95.0.32.115']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ca121f0-090a-f11f-052e-0000fd36ce6f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.0.171.24","pattern":"[ipv4-addr:value = '95.0.171.24']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e794f7b1-ccc0-3e96-9606-00007be4acff","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.96.179.223","pattern":"[ipv4-addr:value = '94.96.179.223']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0a57e56-0525-d36d-13d7-0000febfd561","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.9.233.139","pattern":"[ipv4-addr:value = '94.9.233.139']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9917243-4826-0ecc-72be-0000c0bc466a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.78.89.45","pattern":"[ipv4-addr:value = '94.78.89.45']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36c2847f-0940-653a-9caa-0000e791a7ef","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.78.89.26","pattern":"[ipv4-addr:value = '94.78.89.26']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfa1214a-87d6-95f8-a330-0000e31cdb5d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.78.89.20","pattern":"[ipv4-addr:value = '94.78.89.20']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a3c53bc-fecc-a95d-b3b9-00001ff148eb","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.76.14.233","pattern":"[ipv4-addr:value = '94.76.14.233']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63f436ec-51bb-108e-2ee4-00009892f9a0","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.62.83.184","pattern":"[ipv4-addr:value = '94.62.83.184']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c838ea25-098b-1f62-45b6-00000dcfa094","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.50.241.41","pattern":"[ipv4-addr:value = '94.50.241.41']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6c4663d-82ed-ff5f-c1a0-00006bdac93a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.26.130.173","pattern":"[ipv4-addr:value = '94.26.130.173']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--697fefd0-4cf1-8d62-c93e-0000146ee0a4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.249.81.78","pattern":"[ipv4-addr:value = '94.249.81.78']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e1c2b60-cb66-e21c-edad-00006ca25fd6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.249.49.87","pattern":"[ipv4-addr:value = '94.249.49.87']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67e0a20c-8eb7-f9bd-1da5-0000318e5905","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.249.49.70","pattern":"[ipv4-addr:value = '94.249.49.70']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e0b8edf-7340-9ef8-8b60-0000a943bad1","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.247.62.199","pattern":"[ipv4-addr:value = '94.247.62.199']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--789f2ff4-c4bd-a71f-9bc8-00007ee2d252","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.236.138.235","pattern":"[ipv4-addr:value = '94.236.138.235']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c4d3f5e-3e4a-9166-c27e-000037bd9287","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.231.187.177","pattern":"[ipv4-addr:value = '94.231.187.177']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0fcae3b-35ee-ce73-b127-0000a83f0206","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.231.180.184","pattern":"[ipv4-addr:value = '94.231.180.184']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eed2e2fa-cbac-cbd6-df26-000005b4d79c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.222","pattern":"[ipv4-addr:value = '94.23.188.222']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77dbb340-1465-f3f6-9383-000007f269c5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.221","pattern":"[ipv4-addr:value = '94.23.188.221']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00dc83d6-6489-ff1a-a3da-0000063003f2","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.220","pattern":"[ipv4-addr:value = '94.23.188.220']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2927520-ed78-af81-111d-00001008d0ae","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.216","pattern":"[ipv4-addr:value = '94.23.188.216']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c9c140c-501e-6ac8-950a-0000138c04c0","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.214","pattern":"[ipv4-addr:value = '94.23.188.214']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2f881af-3a45-98a7-19a3-000016c31245","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.213","pattern":"[ipv4-addr:value = '94.23.188.213']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5ffb139-41f4-52e0-729a-000017017872","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.212","pattern":"[ipv4-addr:value = '94.23.188.212']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cf6e083-4bf2-abb5-b228-00001547c62b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.211","pattern":"[ipv4-addr:value = '94.23.188.211']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b3659f0-3b43-5de8-1fa5-0000a3e8f0f6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.209","pattern":"[ipv4-addr:value = '94.23.188.209']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c316966-a9db-b4a0-eb81-0000a22a9ac1","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.208","pattern":"[ipv4-addr:value = '94.23.188.208']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db894461-5c03-238e-2556-0000a8b4b7cb","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.206","pattern":"[ipv4-addr:value = '94.23.188.206']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3587254d-c0ea-56b5-f45b-0000ab3063a5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.204","pattern":"[ipv4-addr:value = '94.23.188.204']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dce48078-62f7-6843-2481-0000afbd1f17","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.202","pattern":"[ipv4-addr:value = '94.23.188.202']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45edd1c2-75c1-4cb5-08af-0000adfba14e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.201","pattern":"[ipv4-addr:value = '94.23.188.201']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32eae154-1258-dadd-036b-0000ac39cb79","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.200","pattern":"[ipv4-addr:value = '94.23.188.200']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98b25ce0-7dae-7d16-b066-00009940c5ac","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.199","pattern":"[ipv4-addr:value = '94.23.188.199']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efb56c76-e259-9e45-fde9-00009882af9b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.198","pattern":"[ipv4-addr:value = '94.23.188.198']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--080d4171-d632-1a3b-1639-0000921c8291","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.196","pattern":"[ipv4-addr:value = '94.23.188.196']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e603205d-03f3-e78b-48b2-0000919856ff","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.194","pattern":"[ipv4-addr:value = '94.23.188.194']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7867b5fe-0a91-6a55-0832-000094d7407a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.193","pattern":"[ipv4-addr:value = '94.23.188.193']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9377a66d-f095-61c4-d32e-00004a05336d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.207.48.249","pattern":"[ipv4-addr:value = '94.207.48.249']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20cf4374-646a-248e-f3a9-000001653f3a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.207.29.221","pattern":"[ipv4-addr:value = '94.207.29.221']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c21c68e-1b39-504b-9611-000072e47d4c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.206.148.23","pattern":"[ipv4-addr:value = '94.206.148.23']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8988a11f-7bcc-936a-0b4e-0000c968a745","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.204.212.135","pattern":"[ipv4-addr:value = '94.204.212.135']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3b84c58-acfe-2a32-1e22-0000a8eb8a72","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.191.86.165","pattern":"[ipv4-addr:value = '94.191.86.165']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8566c1d8-e8f1-8dc7-4cb3-000000618b7a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.183.254.26","pattern":"[ipv4-addr:value = '94.183.254.26']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9baa5595-49c3-0abd-f36f-0000b2d4f3a3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.183.239.85","pattern":"[ipv4-addr:value = '94.183.239.85']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d14b44fc-4952-006d-7503-00006c5b495e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.183.157.246","pattern":"[ipv4-addr:value = '94.183.157.246']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--500192de-816a-35f0-fc7a-0000a459f9d5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.168.123.154","pattern":"[ipv4-addr:value = '94.168.123.154']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d61bb6e-2026-f935-4968-0000022ef261","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.168.122.154","pattern":"[ipv4-addr:value = '94.168.122.154']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--619e4620-06c1-a41f-e90c-0000afd812b4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.168.114.250","pattern":"[ipv4-addr:value = '94.168.114.250']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--777f20ae-8bea-cde0-9428-0000ae0975fd","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.158.62.72","pattern":"[ipv4-addr:value = '94.158.62.72']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd752e71-42f5-5f0a-d42f-00004f110b20","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.158.61.229","pattern":"[ipv4-addr:value = '94.158.61.229']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bffdde7-7e3e-19f0-a214-00004cbef390","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.158.60.200","pattern":"[ipv4-addr:value = '94.158.60.200']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--930fadf0-7a6e-1a04-b24b-000019381eca","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.158.58.127","pattern":"[ipv4-addr:value = '94.158.58.127']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d6b3853-8a34-964d-436d-00001c77084f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.158.58.120","pattern":"[ipv4-addr:value = '94.158.58.120']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7a7b14e-03a9-72d2-26af-0000777f851b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.156.37.223","pattern":"[ipv4-addr:value = '94.156.37.223']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46d58da8-42dc-3753-c95f-000050343c84","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.137.229.234","pattern":"[ipv4-addr:value = '94.137.229.234']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8a93d5d-c926-8f8c-cdaf-0000f29e248c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.124.166.111","pattern":"[ipv4-addr:value = '94.124.166.111']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8910434-e8fc-ab31-7ebc-000019a46c52","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.122.35.32","pattern":"[ipv4-addr:value = '94.122.35.32']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--575986f3-58b2-1641-a26c-00009ea9701f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.103.3.108","pattern":"[ipv4-addr:value = '94.103.3.108']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7cb7e0d-c322-b57a-8c64-0000a7f02690","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.102.4.88","pattern":"[ipv4-addr:value = '94.102.4.88']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76f3f58a-485e-aecb-12a4-0000a958b38c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.88.156.13","pattern":"[ipv4-addr:value = '93.88.156.13']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84cc2124-8e0f-ba30-d438-00001862c619","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 93.67.3.46","pattern":"[ipv4-addr:value = '93.67.3.46']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05e1b2a2-9eae-3c08-c205-00001cbdba07","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 93.184.149.179","pattern":"[ipv4-addr:value = '93.184.149.179']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64b9a3c0-9b84-38c5-bd01-000021c6f288","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.176.165.100","pattern":"[ipv4-addr:value = '93.176.165.100']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a20f0b5-8e5c-ec8b-53ab-000081ec31ec","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.171.184.57","pattern":"[ipv4-addr:value = '93.171.184.57']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d34f2fb-86b1-8557-1e8e-00000118955f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 93.170.66.200","pattern":"[ipv4-addr:value = '93.170.66.200']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e739d730-2f03-dc09-4990-000062122590","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 93.170.117.8","pattern":"[ipv4-addr:value = '93.170.117.8']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca310bbf-1f93-476f-fd70-0000516c12e3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.152.221.68","pattern":"[ipv4-addr:value = '93.152.221.68']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f09b072d-7ed5-d0a3-5c87-00001bad8cfa","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.127.121.67","pattern":"[ipv4-addr:value = '93.127.121.67']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cba57258-1177-2d55-5d5e-0000698abfc4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.123.109.67","pattern":"[ipv4-addr:value = '93.123.109.67']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed7f7a2a-5192-e865-1cd3-00007a580a58","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.170.197","pattern":"[ipv4-addr:value = '93.118.170.197']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--446e626f-d97a-7078-7e53-0000e43a805f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.169.27","pattern":"[ipv4-addr:value = '93.118.169.27']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4cecb56-b03c-48e2-8d01-000045b48609","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.164.193","pattern":"[ipv4-addr:value = '93.118.164.193']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e11deb64-3f40-033c-499b-000093aac763","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.153.229","pattern":"[ipv4-addr:value = '93.118.153.229']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d8d936f-0fae-7816-cca4-00002e800b36","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.150.98","pattern":"[ipv4-addr:value = '93.118.150.98']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9579a3f8-df49-8702-319e-00003659bfb3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.148.66","pattern":"[ipv4-addr:value = '93.118.148.66']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--572f46f1-6914-09b6-c006-000037fbd05b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.140.9","pattern":"[ipv4-addr:value = '93.118.140.9']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f10c05b-ac7d-7c68-6799-000067c8ea12","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.139.92","pattern":"[ipv4-addr:value = '93.118.139.92']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b19e260-d1d1-4394-982a-00008e1a20c7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.139.170","pattern":"[ipv4-addr:value = '93.118.139.170']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab154b7c-301a-0ee6-0a7f-0000c767b6da","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.128.115","pattern":"[ipv4-addr:value = '93.118.128.115']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86b350f0-3a71-39e3-f204-0000da3485d7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.111.10","pattern":"[ipv4-addr:value = '93.118.111.10']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ce62320-eadb-f9e5-298e-000092006a1b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.117.127.141","pattern":"[ipv4-addr:value = '93.117.127.141']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bff9082a-f06b-26b6-77ed-0000c45348ce","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.99.187.41","pattern":"[ipv4-addr:value = '92.99.187.41']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d5bd189-e31f-506b-389f-0000be763f36","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.97.111.22","pattern":"[ipv4-addr:value = '92.97.111.22']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca9a6387-4ceb-e751-0c0c-0000059a47d9","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.63.204.159","pattern":"[ipv4-addr:value = '92.63.204.159']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba2fbf7f-a98c-14bb-b551-0000569ac226","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.62.78.254","pattern":"[ipv4-addr:value = '92.62.78.254']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4594a27-9368-ea43-27b8-0000e92f0d9f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.62.78.240","pattern":"[ipv4-addr:value = '92.62.78.240']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--073d42f5-a7ff-3871-d609-000054fa8154","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.62.121.148","pattern":"[ipv4-addr:value = '92.62.121.148']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19a51ea9-db3d-1aa6-793f-00002029904b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.52.175.65","pattern":"[ipv4-addr:value = '92.52.175.65']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4854ab28-c95e-2dda-7da6-0000b9ba2fb3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.38.39.35","pattern":"[ipv4-addr:value = '92.38.39.35']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1321ce97-50f8-12ae-c54a-0000e73f5366","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.38.18.36","pattern":"[ipv4-addr:value = '92.38.18.36']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b966e07-72a7-80f4-10b7-000040a85223","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.31.3.72","pattern":"[ipv4-addr:value = '92.31.3.72']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0baf9165-95fc-7ccc-acd0-00003a6184b2","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.251.124.73","pattern":"[ipv4-addr:value = '92.251.124.73']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b0c4b6b-3c08-00b8-b47f-0000c2e4c255","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.241.37.47","pattern":"[ipv4-addr:value = '92.241.37.47']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3524f9a0-9d3f-420d-4d38-0000cf857058","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.240.107.161","pattern":"[ipv4-addr:value = '92.240.107.161']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14213a20-c84d-3f92-62c8-0000f66b5a1c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.222.92.92","pattern":"[ipv4-addr:value = '92.222.92.92']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af01d307-d6e3-9cd9-aee4-0000f5780985","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.99","pattern":"[ipv4-addr:value = '92.222.108.99']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48b9fe00-1fbf-a677-88d3-0000ffe6248f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.97","pattern":"[ipv4-addr:value = '92.222.108.97']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fbece96-2e1d-7877-8e76-0000fe244eb8","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.96","pattern":"[ipv4-addr:value = '92.222.108.96']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19935681-dd9c-4684-1ea6-00000573f775","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.127","pattern":"[ipv4-addr:value = '92.222.108.127']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e946617-f3a1-aa45-ecb8-000004b19d42","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.126","pattern":"[ipv4-addr:value = '92.222.108.126']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f79d37ad-bb87-857b-cd7a-000006f7231b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.125","pattern":"[ipv4-addr:value = '92.222.108.125']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69f9a20e-63d6-0a26-4592-000003b8359e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.122","pattern":"[ipv4-addr:value = '92.222.108.122']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0f0f3b4-6aef-d4ea-8bc0-000001fe8bc7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.121","pattern":"[ipv4-addr:value = '92.222.108.121']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87f7c322-8cd6-cb6a-d7bd-0000003ce1f0","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.120","pattern":"[ipv4-addr:value = '92.222.108.120']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5062845-e555-20c4-d693-00001d587591","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.119","pattern":"[ipv4-addr:value = '92.222.108.119']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a20118d3-c3da-4d21-4e37-00001c9a1fa6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.118","pattern":"[ipv4-addr:value = '92.222.108.118']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32be0542-c111-59e5-644b-000017c6589b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.117","pattern":"[ipv4-addr:value = '92.222.108.117']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45b935d4-9fc6-8934-5400-0000160432ac","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.116","pattern":"[ipv4-addr:value = '92.222.108.116']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abb754f8-d5d5-5e17-62d6-00001580e6c2","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.114","pattern":"[ipv4-addr:value = '92.222.108.114']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35d3c15b-9dfd-d6c6-e79b-000010cff047","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.113","pattern":"[ipv4-addr:value = '92.222.108.113']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42d4f1cd-08f8-8ac8-3c25-0000110d9a70","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.112","pattern":"[ipv4-addr:value = '92.222.108.112']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbdda077-9469-e9c3-b8ad-0000134b2429","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.111","pattern":"[ipv4-addr:value = '92.222.108.111']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acda90e1-4052-b4bb-3ab2-000012894e1e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.110","pattern":"[ipv4-addr:value = '92.222.108.110']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb1a2992-5977-10e0-79f7-0000a42678c3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.108","pattern":"[ipv4-addr:value = '92.222.108.108']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ca20495-2714-c320-6d62-0000aeb855c9","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.106","pattern":"[ipv4-addr:value = '92.222.108.106']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5ab552f-3ee0-f731-4fc9-0000acfeeb90","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.105","pattern":"[ipv4-addr:value = '92.222.108.105']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2ac65b9-3f20-91d8-eacc-0000ad3c81a7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.104","pattern":"[ipv4-addr:value = '92.222.108.104']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cc8f01a-df48-04a2-0d0b-0000a8739722","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.103","pattern":"[ipv4-addr:value = '92.222.108.103']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d948c1c0-851e-380d-e154-0000827a4f0d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.223","pattern":"[ipv4-addr:value = '92.222.104.223']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae4ff156-bbdd-9f07-8a54-000083b8253a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.222","pattern":"[ipv4-addr:value = '92.222.104.222']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4041907a-6245-0534-4124-0000803cf154","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.220","pattern":"[ipv4-addr:value = '92.222.104.220']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12b07b1d-4743-1d97-ce97-00009d586535","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.219","pattern":"[ipv4-addr:value = '92.222.104.219']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65b74b8b-4166-0859-f3a3-00009c9a0f02","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.218","pattern":"[ipv4-addr:value = '92.222.104.218']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f508561a-a33d-a212-f23c-000097c6483f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.217","pattern":"[ipv4-addr:value = '92.222.104.217']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--820f668c-bdea-6850-6743-000096042208","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.216","pattern":"[ipv4-addr:value = '92.222.104.216']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c0107a0-48cd-6e27-d731-00009580f666","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.214","pattern":"[ipv4-addr:value = '92.222.104.214']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2659203-c04e-4b0d-4817-000090cfe0e3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.213","pattern":"[ipv4-addr:value = '92.222.104.213']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8562a295-9827-1431-c5b6-0000910d8ad4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.212","pattern":"[ipv4-addr:value = '92.222.104.212']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c6bf32f-5c34-5392-3df1-0000934b348d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.211","pattern":"[ipv4-addr:value = '92.222.104.211']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b6cc3b9-c692-cf50-c82b-000092895eba","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.210","pattern":"[ipv4-addr:value = '92.222.104.210']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bab4a5c-4276-8a74-6b8a-000025e40250","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.209","pattern":"[ipv4-addr:value = '92.222.104.209']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cac7aca-fdb6-704f-1106-000024266867","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.208","pattern":"[ipv4-addr:value = '92.222.104.208']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec13675b-272d-4779-2773-00002f7a2f5a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.207","pattern":"[ipv4-addr:value = '92.222.104.207']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b1457cd-ff0f-916f-61c1-00002eb8456d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.206","pattern":"[ipv4-addr:value = '92.222.104.206']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--021d0677-0cad-3abc-bd3a-00002cfefb34","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.205","pattern":"[ipv4-addr:value = '92.222.104.205']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--751a36e1-59c2-a352-9bcb-00002d3c9103","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.204","pattern":"[ipv4-addr:value = '92.222.104.204']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb7ea342-50b6-28cd-29b9-000028738786","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.203","pattern":"[ipv4-addr:value = '92.222.104.203']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0570c26e-002f-8106-fc4e-00002bf753e8","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.201","pattern":"[ipv4-addr:value = '92.222.104.201']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d82f4f4c-e57f-e65b-b12d-00001f4c370a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.199","pattern":"[ipv4-addr:value = '92.222.104.199']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af287fda-ca28-0606-d24b-00001e8e5d3d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.198","pattern":"[ipv4-addr:value = '92.222.104.198']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--489052dd-d22b-4b3b-dfb9-000014107037","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.196","pattern":"[ipv4-addr:value = '92.222.104.196']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1990367-ca07-2dc3-8e8c-00001656ce6e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.195","pattern":"[ipv4-addr:value = '92.222.104.195']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a69e33f1-9ea4-9f87-33cb-00001794a459","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.194","pattern":"[ipv4-addr:value = '92.222.104.194']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38faa652-d904-99f3-f33d-000012dbb2dc","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.193","pattern":"[ipv4-addr:value = '92.222.104.193']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ffd96c4-0c00-d29e-86a4-00001319d8eb","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.192","pattern":"[ipv4-addr:value = '92.222.104.192']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5450cfc0-b618-0149-311f-000065c2ef12","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.208.69.107","pattern":"[ipv4-addr:value = '92.208.69.107']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5728a44-5d0e-447c-160c-00003c9b9660","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.208.26.16","pattern":"[ipv4-addr:value = '92.208.26.16']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1ce940f-b351-a704-043b-0000d5194971","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.206.133.127","pattern":"[ipv4-addr:value = '92.206.133.127']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3727915f-237a-a1e8-aa92-00001fc86643","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.184.109.125","pattern":"[ipv4-addr:value = '92.184.109.125']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9633aa4a-2157-2b7d-65fc-00009976c867","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.130.231.52","pattern":"[ipv4-addr:value = '92.130.231.52']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--831e4884-9577-d30d-fb6e-0000820ba4de","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.118.39.65","pattern":"[ipv4-addr:value = '92.118.39.65']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f40eca-82b4-f21b-74e6-0000734ed41a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.118.112.176","pattern":"[ipv4-addr:value = '92.118.112.176']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2341ea5-2b9e-3b00-a8fe-00008c9c34d6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.93.60.178","pattern":"[ipv4-addr:value = '91.93.60.178']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d32f556-425a-7f89-1586-000084d5025e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.68.200","pattern":"[ipv4-addr:value = '91.92.68.200']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5adf31a-a4f4-9dd1-8824-0000317a1ffd","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.47.201","pattern":"[ipv4-addr:value = '91.92.47.201']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d651627e-7204-2204-0ea1-0000b7e33170","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.92.47.187","pattern":"[ipv4-addr:value = '91.92.47.187']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6a9ae27-89d3-03b5-ddb5-00004e48490e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.92.42.11","pattern":"[ipv4-addr:value = '91.92.42.11']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--651bc543-2eb3-d94f-0e52-000095b9fccf","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.41.148","pattern":"[ipv4-addr:value = '91.92.41.148']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--631c7a77-bf3b-808d-5c6b-0000754da722","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.40.183","pattern":"[ipv4-addr:value = '91.92.40.183']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed06267a-a810-7783-c885-0000a23e4aaa","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.241.57","pattern":"[ipv4-addr:value = '91.92.241.57']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bfaa8dd-ff53-a0e8-febb-00004978685f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.211.46","pattern":"[ipv4-addr:value = '91.92.211.46']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e219ca1d-193d-341d-b81a-0000213e1686","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.209.22","pattern":"[ipv4-addr:value = '91.92.209.22']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb2b49bd-d485-199f-c801-0000fb8861c7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.133.195","pattern":"[ipv4-addr:value = '91.92.133.195']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26facfde-59f7-3133-ffa7-0000b183a267","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.90.121.157","pattern":"[ipv4-addr:value = '91.90.121.157']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--453a7b2d-8a5d-0b43-04cd-0000421e044c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.83.27.92","pattern":"[ipv4-addr:value = '91.83.27.92']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1cfa0f5-869b-572b-29e6-00001afea4f2","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.80.74.137","pattern":"[ipv4-addr:value = '91.80.74.137']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82bb1fe1-8405-6d64-d000-00006f8efece","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.78.199.11","pattern":"[ipv4-addr:value = '91.78.199.11']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbe1bcf0-a21f-d166-456a-0000738876d6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.63.142.221","pattern":"[ipv4-addr:value = '91.63.142.221']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c8d50de-4b14-b744-3be8-0000d13316c5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.55.119.175","pattern":"[ipv4-addr:value = '91.55.119.175']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c8b8fae-069c-7e50-b54a-0000e8609070","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.250.7.96","pattern":"[ipv4-addr:value = '91.250.7.96']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b22cd63a-39f7-43c9-7840-0000effaa899","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.242.54.82","pattern":"[ipv4-addr:value = '91.242.54.82']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea3f6441-1f97-657d-d23b-0000065e8217","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.242.53.57","pattern":"[ipv4-addr:value = '91.242.53.57']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c932022c-8fbb-3755-0849-000072dc709d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.242.199.173","pattern":"[ipv4-addr:value = '91.242.199.173']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6befd5c1-6268-0506-1e74-000081bb1896","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.241.153.105","pattern":"[ipv4-addr:value = '91.241.153.105']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2138ec3-3845-b810-cd07-00004f345b94","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.237.41.59","pattern":"[ipv4-addr:value = '91.237.41.59']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d46d145-c650-24ab-c2c6-0000d939c769","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.236.172.41","pattern":"[ipv4-addr:value = '91.236.172.41']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73f44ae6-cf13-4992-bcc5-00003bce3c3d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.236.172.107","pattern":"[ipv4-addr:value = '91.236.172.107']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--051a82e2-ad78-e3c2-51b6-0000ca1dc555","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.234.26.163","pattern":"[ipv4-addr:value = '91.234.26.163']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--214dadca-ca82-5ba5-c848-00003c9172f1","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.234.139.9","pattern":"[ipv4-addr:value = '91.234.139.9']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a74d4419-bf52-4a80-8858-00004f5238f1","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.234.137.10","pattern":"[ipv4-addr:value = '91.234.137.10']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a786b2c-b680-5cc5-590d-000046b27a2b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.234.136.237","pattern":"[ipv4-addr:value = '91.234.136.237']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55eab51f-e401-9f70-6476-0000d3b2af5a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.234.132.155","pattern":"[ipv4-addr:value = '91.234.132.155']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f25acc69-7f31-e879-eaad-0000830e1f02","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.232.167.178","pattern":"[ipv4-addr:value = '91.232.167.178']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34651542-31eb-2474-ad72-00000a714e24","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.232.165.143","pattern":"[ipv4-addr:value = '91.232.165.143']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46a30ebd-370d-d42f-23ff-00001330087c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.231.121.99","pattern":"[ipv4-addr:value = '91.231.121.99']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2dd8426-5e99-6998-0622-00008ce8c5ed","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.231.121.8","pattern":"[ipv4-addr:value = '91.231.121.8']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66d2b711-a052-abdc-eaa4-0000a33fd0c0","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.231.121.247","pattern":"[ipv4-addr:value = '91.231.121.247']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--478f2001-50d6-fcc9-1683-00008796e52b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.231.121.226","pattern":"[ipv4-addr:value = '91.231.121.226']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36825a02-a773-9a15-28de-00001c6b5fc7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.231.121.199","pattern":"[ipv4-addr:value = '91.231.121.199']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--483326bf-0daf-d7b5-c489-000014b3cc94","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.231.121.194","pattern":"[ipv4-addr:value = '91.231.121.194']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2cb13c0-7ad5-c0b2-f1ee-0000eaa7d776","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.231.120.164","pattern":"[ipv4-addr:value = '91.231.120.164']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e455a626-fb35-1a94-2fe0-00005988d281","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.230.225.84","pattern":"[ipv4-addr:value = '91.230.225.84']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e338623f-29e3-5015-c5ee-00005e817a5d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.230.225.80","pattern":"[ipv4-addr:value = '91.230.225.80']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aae1fdc-2a28-f6b6-bce4-00000566be65","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.230.225.72","pattern":"[ipv4-addr:value = '91.230.225.72']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64a07ef0-a1aa-8b03-4ea5-000006e26a0b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.230.225.70","pattern":"[ipv4-addr:value = '91.230.225.70']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3615f70c-46ee-8950-9754-00002a8fad8b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.230.225.209","pattern":"[ipv4-addr:value = '91.230.225.209']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6aaea9d-173c-dd67-1cb9-000021d3eab6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.230.225.206","pattern":"[ipv4-addr:value = '91.230.225.206']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec27be37-8768-b89d-c2c4-0000193d61b5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.230.225.195","pattern":"[ipv4-addr:value = '91.230.225.195']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db997c43-4c3f-bcfb-2ce2-000027044965","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.230.225.16","pattern":"[ipv4-addr:value = '91.230.225.16']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42902df9-05bf-16ce-4a9a-00002542f73c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.230.225.15","pattern":"[ipv4-addr:value = '91.230.225.15']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec672039-73e4-78a5-7ee5-00009009f238","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.228.33.7","pattern":"[ipv4-addr:value = '91.228.33.7']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acd7f2f6-bcf3-5968-7220-0000b4b6caf1","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.228.33.138","pattern":"[ipv4-addr:value = '91.228.33.138']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f6c2593-3a6e-e47f-b9e7-0000b48b21df","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.228.123.9","pattern":"[ipv4-addr:value = '91.228.123.9']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b70b591-5875-17bb-a1af-000076b2c405","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.228.122.241","pattern":"[ipv4-addr:value = '91.228.122.241']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bfafcbc-55eb-aad3-ded1-000059986754","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.227.86.109","pattern":"[ipv4-addr:value = '91.227.86.109']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bd35830-3357-8228-1a93-00001f15c7cb","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.227.226.66","pattern":"[ipv4-addr:value = '91.227.226.66']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--913edb1b-d4e7-bf6c-bf64-00001dd4e2d5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.226.115.112","pattern":"[ipv4-addr:value = '91.226.115.112']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d7f2fa6-1f38-2a7e-59dc-0000f66fe864","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.226.113.156","pattern":"[ipv4-addr:value = '91.226.113.156']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99f3e1a0-3236-5613-d32d-0000dce944d9","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.224.92.74","pattern":"[ipv4-addr:value = '91.224.92.74']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--daf1926d-1fd6-c886-76bf-00006bb18e5e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.215.69.206","pattern":"[ipv4-addr:value = '91.215.69.206']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dface50-67b9-25ae-2c7f-000063848c34","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.215.146.234","pattern":"[ipv4-addr:value = '91.215.146.234']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a9056b3-1ac6-af7f-fe0f-0000e8033007","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.214.138.207","pattern":"[ipv4-addr:value = '91.214.138.207']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0086f5ad-9d36-cddb-a501-0000739d779c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.207.245.145","pattern":"[ipv4-addr:value = '91.207.245.145']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a86b8eb-a5c0-eb57-7563-0000ddd3a832","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.207.102.58","pattern":"[ipv4-addr:value = '91.207.102.58']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7390595-ebee-e33a-c6e1-0000d9bf9ec4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.198.77.230","pattern":"[ipv4-addr:value = '91.198.77.230']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9fa9132-b894-baac-b40d-0000cf9b9d74","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.196.228.252","pattern":"[ipv4-addr:value = '91.196.228.252']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d3d28da-e383-b028-ac28-0000eb816b7f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.196.111.7","pattern":"[ipv4-addr:value = '91.196.111.7']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5efb4761-b16f-64be-ec16-000031bd6303","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.196.111.127","pattern":"[ipv4-addr:value = '91.196.111.127']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80ffb6e5-7e62-8022-b1f1-0000a4e822c2","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.194.91.202","pattern":"[ipv4-addr:value = '91.194.91.202']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52425138-ad1e-0783-ea37-0000ae103cf6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.192.204.163","pattern":"[ipv4-addr:value = '91.192.204.163']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31bcbab1-cc0b-c3ec-d6cb-0000738947fa","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.188.247.151","pattern":"[ipv4-addr:value = '91.188.247.151']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb2b4bfc-6b20-7458-6ea4-0000fce43eaf","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.186.249.112","pattern":"[ipv4-addr:value = '91.186.249.112']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac7feede-9ab9-2348-77c5-0000fdea38bc","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.170.9.78","pattern":"[ipv4-addr:value = '91.170.9.78']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8475d5d-c9e6-c617-49ad-0000bf2c053a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.16.243.113","pattern":"[ipv4-addr:value = '91.16.243.113']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fa9c42b-e8cb-e283-a57d-00004f9ad744","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.152.6.16","pattern":"[ipv4-addr:value = '91.152.6.16']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5da80088-894d-675b-9fda-000056b9fcc6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.150.213.146","pattern":"[ipv4-addr:value = '91.150.213.146']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1de7186d-868f-dbc5-ce0b-000066dc2376","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.146.167.76","pattern":"[ipv4-addr:value = '91.146.167.76']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca187a66-47ce-c754-4dce-000026942d36","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.132.23.25","pattern":"[ipv4-addr:value = '91.132.23.25']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cb2c5b8-bdf1-4e4c-566d-000062f1dd10","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.132.196.49","pattern":"[ipv4-addr:value = '91.132.196.49']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df32e150-608f-b8bf-0fee-0000c855e3a5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.132.125.26","pattern":"[ipv4-addr:value = '91.132.125.26']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a826ad91-897f-5d4c-aede-000065de7f05","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.124.141.50","pattern":"[ipv4-addr:value = '91.124.141.50']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d22902f-17a0-9953-bc61-000047f07526","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.103.249.254","pattern":"[ipv4-addr:value = '91.103.249.254']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa1381cc-dd39-8786-5392-0000581362ca","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 90.70.76.142","pattern":"[ipv4-addr:value = '90.70.76.142']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be2dbb16-b849-e7fb-a7a1-0000e5c8d2d3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 90.52.100.31","pattern":"[ipv4-addr:value = '90.52.100.31']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--376e3272-fe3b-48b1-23dd-0000703dceb7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 90.5.122.47","pattern":"[ipv4-addr:value = '90.5.122.47']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2caa1b1b-c02c-b8ac-e502-000086b09df1","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 90.3.109.42","pattern":"[ipv4-addr:value = '90.3.109.42']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecab3ee5-3561-9dc1-4dfe-0000478b4584","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 90.247.51.22","pattern":"[ipv4-addr:value = '90.247.51.22']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f689efdb-c85d-68fe-12d4-0000f79aa699","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 90.230.22.194","pattern":"[ipv4-addr:value = '90.230.22.194']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbc1d861-e7c1-38b0-ca6e-0000510d78ec","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 90.188.231.181","pattern":"[ipv4-addr:value = '90.188.231.181']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]}]}